Example Configurations

1. This example configuration is the default configuration in snort.conf and can be used for repeatable tests of stream reassembly in readback mode.

       preprocessor stream5_global: \
           max_tcp 8192, track_tcp yes, track_udp yes, track_icmp no
   
       preprocessor stream5_tcp: \
           policy first, use_static_footprint_sizes
   
       preprocessor stream5_udp: \
           ignore_any_rules
   

2. This configuration maps two network segments to different OS policies, one for Windows and one for Linux, with all other traffic going to the default policy of Solaris.

       preprocessor stream5_global: track_tcp yes
       preprocessor stream5_tcp: bind_to 192.168.1.0/24, policy windows
       preprocessor stream5_tcp: bind_to 10.1.1.0/24, policy linux
       preprocessor stream5_tcp: policy solaris