Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adds test about mime when stream depth is reached #1390

Closed
wants to merge 1 commit into from

Conversation

catenacyber
Copy link
Collaborator

Ticket

Redmine ticket: https://redmine.openinfosecfoundation.org/issues/6367

Suricata PR incoming

@@ -0,0 +1,8 @@
# Description

Test mime base64 decoding completeness when stream depth is reached
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this on the standard stream depth setting for now? 64 mb?

While I see that we're not trying to store any files, would filestore's stream depth settings also affect this (as it should ideally override stream's depth settings)?

So, should we have a suricata.yaml in this test? Or would we never change the standard settings for depths? wdyt?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, it is for standard depth which is 1Mb

would filestore's stream depth settings also affect this (as it should ideally override stream's depth settings)?

Maybe

So, should we have a suricata.yaml in this test?

Yes, or --set stream.depth=1mb

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

stream.reassembly.depth in facts

@catenacyber
Copy link
Collaborator Author

Continued in #1393

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
requires suricata pr Depends on a PR in Suricata
Development

Successfully merging this pull request may close these issues.

2 participants