[Snort-users] Stream5 - UDP
pipsparag at ...131...
Wed Jun 9 07:59:29 EDT 2010
Can somebody tell me why do we need to track_udp in stream5? I case of TCP, it make sense since it has valid initial and closure handshake. Is it Ok to set track_udp to no?
Also, is there any way to restrict total memory consumed by snort to some limit? I mean any configuration option where we can specify say X MB.
Any help in this regard is appreciated.
More information about the Snort-users