Project

General

Profile

Actions

Optimization #2991

closed

app-layer-event keyword tx handling

Added by Victor Julien almost 5 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

When the app-layer-event keyword matching code runs, it's called with both the tx ptr and the tx id. When matching it just uses the id to look up the events, so this in turn does a tx ptr look up. In some protocols/scenarios this can be quite an expensive operation. Since the tx ptr is already available, the code should be changed to use the tx ptr.

Actions #1

Updated by Jeff Lucovsky over 4 years ago

  • Status changed from New to Resolved
Actions #2

Updated by Victor Julien over 4 years ago

  • Status changed from Resolved to Closed
  • Target version changed from TBD to 5.0rc1
Actions

Also available in: Atom PDF