[Bro-Dev] #907: Need tcp_excessive_data_without_further_acks to be redefinable

Bro Tracker bro at tracker.bro-ids.org
Mon Oct 22 00:58:24 PDT 2012


#907: Need tcp_excessive_data_without_further_acks to be redefinable
------------------------+---------------------
 Reporter:  carsten     |       Type:  Problem
   Status:  new         |   Priority:  Normal
Milestone:  Bro2.2      |  Component:  Bro
  Version:  git/master  |   Keywords:
------------------------+---------------------
 In my scripts, I must redefine tcp_excessive_data_without_further_acks
 from scripts/base/init-bare.bro.
 Currently I have to patch the source for doing it, as the constant is not
 redefinable from a script. The fun thing is: the documentation even says
 "If set to zero, then we don’t ever give up.", which you currently cannot
 do from scripts.

 Please change inside scripts/base/init-bare.bro from
     const tcp_excessive_data_without_further_acks = 10 * 1024 * 1024;
 to
     const tcp_excessive_data_without_further_acks = 10 * 1024 * 1024
 &redef;

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/907>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list