From mboxrd@z Thu Jan 1 00:00:00 1970 From: Egorkin Igor Date: Sat, 16 Feb 2013 13:37:09 +0000 Subject: IPP2P. How to set the max length of the analyzed data? Message-Id: <511F8B85.9030308@egorkin.ru> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org Hello! From http://l7-filter.sourceforge.net/HOWTO-kernel > By default, l7-filter looks at the first 10 packets or 2kB, whichever is smaller. > You can alter the number of packets at any time through /proc/net/layer7_numpackets. > (i.e. "echo 16 > /proc/net/layer7_numpackets".) In l7-filter versions 2.0 and forward, > you can alter the number of bytes at module load time: "modprobe xt_layer7 maxdatalen=N". > (ipt_layer7 in old versions), where N is in bytes. > This should be used cautiously, since performance may decrease drastically with larger data sizes. > To prevent you from accidentally bringing down your network, there is an artificial limit of 65536 imposed. I could not find a similar option for IPP2P. May be inside the module already exists some limits? -- Igor