Cole Dishington

By default, force flow reuse to reuse an existing flows no matter the state of the flow. Add a configuration option flow.force-reuse, enabled by default, that can turn off the...

flow: optionally use pkt recursion for hash

3

If a Suricata inline IPS device is routing traffic over a non-encrypted tunnel, like IPv6 tunnels, packets in a flow will be dropped and not be matched. e.g. The following...

detect: Inline default pkt inspect engines

7

Scenarios with a small number of rules, no MPM-based rules, experienced a 6%-14% performance degradation from the commit 0965afd66 detect: pkt inspect engines inwhich the default pkt inspect engines were...

flow: Add cfg for optional flow reuse during low memory

3

By default, force flow reuse to reuse an existing flows no matter the state of the flow. Add a configuration option flow.force-reuse, enabled by default, that can turn off the...

flow: Add test for excluding pkt recursion from flow

4

Add tests for verifying matching packet flows when including and excluding pkt recursion from flow matching. Bug: #6260 Redmine ticket: https://redmine.openinfosecfoundation.org/issues/6260

flow: Add tests for optional flow reuse during low memory

4

Add test for verifying that if the memcap is reached, alive flows will be reused with flow.force-reuse on and not be re-used with flow.force-reuse off. Feature: #6293 Redmine ticket: https://redmine.openinfosecfoundation.org/issues/6293

flow: optionally use pkt recursion for hash

1

If a Suricata inline IPS device is routing traffic over a non-encrypted tunnel, like IPv6 tunnels, packets in a flow will be dropped and not be matched. e.g. The following...