Please include the following information with your help request:
- Suricata version : 7.0.8
- Operating system and/or Linux distribution : Ubuntu 20
- How you installed Suricata (from source, packages, something else) Source
do anyone know why the file extraction shows the state truncated even if the file size is under the file-store.stream-depth value ? Works fine with small files like 1,2,3 mb but state is mostly truncated when its 10mb and other big files then the state comes truncated. Any idea can it be solved or its the normal behavior ?
@Andreas_Herz ? any idea about this