Actions
Bug #7903
openApp layer protocols do not support new kibi-byte units in memcap (e.g. "64 MiB")
Affected Versions:
Effort:
Difficulty:
Label:
Description
App layer protocols do not support new kibi-byte units in memcap.
Examples are "app-layer.protocols.ftp.memcap" and "app-layer.protocols.mqtt.max-msg-length".
Un-commenting the default value leads to error (see below).
ftp: enabled: yes memcap: 64 MiB
Leads to <Error> -- Invalid value for websocket.max-payload-size
Same for "mqtt.max-msg-length":
mqtt: enabled: yes max-msg-length: 1 MiB
Leads to <Error> -- Invalid value for mqtt.max-msg-length: 1 MiB
I think this is because the Rust get_memunit()
function does not know the new suffixes.
See https://github.com/OISF/suricata/blob/e62eb004599ec500aeacfa7150b0dbca19f0a0fb/rust/src/conf.rs#L183
Actions