[Oisf-users] TCP connection timeouts with suricata 4.0.3

Gareth Parks gparks at viator.com
Mon Feb 12 20:54:33 UTC 2018


> I increased stream.memcap and stream.reassembly.memcap on the server 
> restarted 2 hours ago and for a period of time the stat 
> tcp.segment_memcap_drop didn't exist but the timeout was still occurring.
I was given some help off list and I changed stream.drop-invalid to no 
and the problem is now gone. I was however not able to work out why 
suricata was deciding the packets were invalid



More information about the Oisf-users mailing list