[Oisf-users] Question about payload-buffer-size limit

[Emanuel Alves]

2016-07-01 11:06 GMT+01:00 Peter Manev <petermanev at gmail.com>:

> On Thu, Jun 23, 2016 at 5:40 PM, Emanuel Alves
> <emanuel.alves.work at gmail.com> wrote:
> > Hey guys,
> >
> > Should payload-buffer-size affect the payload_printable buffer also?
>
> It should. Is it working as expected in your case?
> Which Suricata version are you using ?
>
>
3.0.2.
I think that limits the payload buffer size only.
You can confirm this if you read the source code.

I want to confirm if it is ok by design because I'm interested in such
configuration available.


> >
> > Emanuel
> >
> >
> > _______________________________________________
> > Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> > Site: http://suricata-ids.org | Support:
> http://suricata-ids.org/support/
> > List:
> https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> > Suricata User Conference November 9-11 in Washington, DC:
> > http://oisfevents.net
>
>
>
> --
> Regards,
> Peter Manev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20160703/0e53e739/attachment-0002.html>