Format

    stream_reassemble:<enable|disable>, <server|client|both>[, noalert][, fastpath];

• The optional noalert parameter causes the rule to not generate an alert when it matches.
• The optional fastpath parameter causes Snort to ignore the rest of the connection.