[Oisf-users] TCP connection timeouts with suricata 4.0.3

[Andreas Herz]

On 13/02/18 at 07:54, Gareth Parks wrote:
> 
> >I increased stream.memcap and stream.reassembly.memcap on the server
> >restarted 2 hours ago and for a period of time the stat
> >tcp.segment_memcap_drop didn't exist but the timeout was still occurring.
> I was given some help off list and I changed stream.drop-invalid to no and
> the problem is now gone. I was however not able to work out why suricata was
> deciding the packets were invalid

You might in the future:

https://redmine.openinfosecfoundation.org/issues/1749

-- 
Andreas Herz