detect max-bytes

Function

The detect max-bytes command specifies the maximum number of bytes to be detected by the SA module.

The undo detect max-bytes command restores the maximum number of bytes detected by the SA module to the default value.

Format

detect max-bytes max-bytes

undo detect max-bytes

Parameters

Parameter	Description	Value
max-bytes	Specifies the maximum number of bytes to be detected.	The value is an integer ranging from 1 to 10240. The default value is 2048.

Views

SA view

Default Level

2: Configuration level

Usage Guidelines

This command is used to specify the maximum number of bytes detected by the SA module to prevent certain applications from evading the detection by using small packets.

In common cases, the default maximum value can meet the requirement. If the value is too large, the device performance may deteriorate. If the value is too small, the device may fail to detect certain applications.

Example

# Set the maximum number of bytes to be detected by the SA module to 4096.

<sysname> system-view
[sysname] sa
[sysname-sa] detect max-bytes 4096