[Oisf-users] Question about payload-buffer-size limit

Peter Manev petermanev at gmail.com
Tue Jul 5 23:28:05 UTC 2016


On Mon, Jul 4, 2016 at 12:32 AM, Emanuel Alves
<emanuel.alves.work at gmail.com> wrote:
>
>
> 2016-07-01 11:06 GMT+01:00 Peter Manev <petermanev at gmail.com>:
>>
>> On Thu, Jun 23, 2016 at 5:40 PM, Emanuel Alves
>> <emanuel.alves.work at gmail.com> wrote:
>> > Hey guys,
>> >
>> > Should payload-buffer-size affect the payload_printable buffer also?
>>
>> It should. Is it working as expected in your case?
>> Which Suricata version are you using ?
>>
>
> 3.0.2.
> I think that limits the payload buffer size only.
> You can confirm this if you read the source code.
>

yes - I was left with the impression that this pr -
https://github.com/inliniac/suricata/pull/2021
introduces the config option for both for 3.1

> I want to confirm if it is ok by design because I'm interested in such
> configuration available.
>

Please feel free to open a feature request to extend that config functionality.
PRs are welcome for test runs as well.

>>
>> >
>> > Emanuel
>> >
>> >
>> > _______________________________________________
>> > Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
>> > Site: http://suricata-ids.org | Support:
>> > http://suricata-ids.org/support/
>> > List:
>> > https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>> > Suricata User Conference November 9-11 in Washington, DC:
>> > http://oisfevents.net
>>
>>
>>
>> --
>> Regards,
>> Peter Manev
>
>



-- 
Regards,
Peter Manev



More information about the Oisf-users mailing list