Feature #1344: OOBE -2- decreasing the default flow-timeouts (at least for TCP) - Suricata - Open Information Security Foundation

Actions

Copy link

Feature #1344

closed

OOBE -2- decreasing the default flow-timeouts (at least for TCP)

Added by Peter Manev about 10 years ago. Updated over 8 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Victor Julien

Target version:

3.1rc1

Effort:

Difficulty:

Label:

Description

This is part of OOBE tickets line.
Out Of the Box Experience(OOBE) is aimed at providing better defaults values in suricata.yaml

Suggested:

flow-timeouts:

  default:

    new: 5

    established: 300

    closed: 0

    emergency-new: 5

    emergency-established: 100

    emergency-closed: 0

  tcp:

    new: 5

    established: 360

    closed: 5

    emergency-new: 3

    emergency-established: 300

    emergency-closed: 2

  udp:

    new: 10

    established: 300

    emergency-new: 5

    emergency-established: 100

  icmp:

    new: 10

    established: 300

    emergency-new: 5

    emergency-established: 100