UDP Stream Preprocessing Options
Timeout
Specifies the number of seconds the preprocessor keeps an inactive stream in the state table. If additional datagrams are not seen in the specified time, the preprocessor deletes the stream from the state table.
Firewall Threat Defense devices use this option only for connections that are inspected by Snort. For other connections, you need to configure a global UDP timeout in your platforrm settings policy.
Firewall Threat Defense devices ignore this option and, instead, use the settings in the advanced access control Threat Defense Service Policy. See Configure a Service Policy Rule for more information.
Packet Type Performance Boost
Sets to preprocessor to ignore UDP traffic for all ports and
application protocols that are not specified in enabled rules, except when a
UDP rule with both the source and destination ports set to
any has a
flow or
flowbits option. This performance improvement could
result in missed attacks.