[Snort-inline-users] stream4 enforcing state

[<tut...@pa...>]

Hi,

I've just returned to snort inline after a year or so having it
disabled. And now I recall why I disabled it. 

When I set the enforce_state keyword on the stream4 processor, my
sessions hang after a few minutes of inactivity. Is there a better
resolution for this than either disabling the state enforcement, or
setting a higher timeout for the stream4 processor?

Thanks
tut.