[Oisf-users] Suricata 4.0.0-rc1 ready for testing!

[Peter Manev]

> On 7 Jul 2017, at 22:05, Cooper F. Nelson <cnelson at ucsd.edu> wrote:
> 
> That is configured to be the same as the file directive.
> 
> I tried temporarily raising the stream depth to something fairly high
> and I'm still seeing truncated files, so it's probably something else on
> my system.


What is your bypass set to (if you have it set) as compared to the truncated size? 


> 
> -Coop
> 
>> On 7/7/2017 11:58 AM, Peter Manev wrote:
>> How about if you adjust (libhtp) http req/resp body ?
>> 
>>> Has anyone else observed this behavior?
>>> 
>>> -Coop
>>> 
> 
> 
> -- 
> Cooper Nelson
> Network Security Analyst
> UCSD ACT Security Team
> cnelson at ucsd.edu x41042
>