[Oisf-users] [OT: Pedantic] file truncated

[Andreas Moe]

Not sure if you were correcting anyone or not sure what was being
mentioned? But the suricata yaml configuration treats "mb" as Megabyte/MB
(ex. stream reassembly depth, memcaps, etc). Same goes for KB written as kb.

Keeping configurations lowercase can be very handy so not to have to miss
something in say a grep search due to case issues.

2015-04-22 19:54 GMT+02:00 James Moe <jimoe at sohnen-moe.com>:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 04/22/2015 12:18 AM, Peter Manev wrote:
> >>> i increased the stream memcap from default 32mb to 128mb;
> > I think you can try setting this to 512mb
> >>> i decreased the reassembly memcap from default 128mb to 64mb.
> > and this to 1024mb
> >
>   mb = milli-bit, or milli-bar
>   Mb = mega-bit
>   MB = mega-byte
>
>   See <http://en.wikipedia.org/wiki/Metric_prefix>.
>
> - --
> James Moe
> moe dot james at sohnen-moe dot com
> 520.743.3936
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
>
> iEYEARECAAYFAlU34E8ACgkQzTcr8Prq0ZNeAwCfcoWSbldhET0me1ZBMNEUUW8C
> 1DcAoJYOn+kih8/VCRXx563vV7OXJEDG
> =EC40
> -----END PGP SIGNATURE-----
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> Suricata User Conference November 4 & 5 in Barcelona:
> http://oisfevents.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20150422/6e2d63c3/attachment-0002.html>