stream5 and use_static_footprint_sizes

[Guise McAllaster <guise.mcallaster () gmail com>]

Hi,

I inherited some snorts and noticed that they all had the
'use_static_footprint_sizes' option enabled for the streams5 preprocessor.
Can someone please give me more info about this.  I am reading in the manual
where it recommends not to have this turned on in production but it looks
like a lot of people use it.  Why?

The README says it emulates stream4 flushing of reassembled packets but I
still do not know what this means.

Thx.

--Guise

------------------------------------------------------------------------------
Return on Information:
Google Enterprise Search pays you back
Get the facts.
http://p.sf.net/sfu/google-dev2dev

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs