[Snort-users] Stream5 - UDP

Parag Pote pipsparag at ...131...
Wed Jun 9 07:59:29 EDT 2010


Hi All,

Can somebody tell me why do we need to track_udp in stream5? I case of TCP, it make sense since it has valid initial and closure handshake. Is it Ok to set track_udp to no?

Also, is there any way to restrict total memory consumed by snort to some limit? I mean any configuration option where we can specify say X MB.

Any help in this regard is appreciated.

Rgds,
Parag


      





More information about the Snort-users mailing list