Project

General

Profile

Actions
Copy link

Bug #3401

closed
VJ VJ

smb1: 'event only' transactions for bad requests never close

Bug #3401: smb1: 'event only' transactions for bad requests never close

Added by Victor Julien over 6 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
5.0.1
Affected Versions:
5.0.0
Effort:
Difficulty:
Label:
Needs backport

Description

For certain record types in smb1 we don't create transactions, except when we need them to set a parser event.

If this happened on the request side, the tx would never complete as the response side did not mark it as complete. This could lead to a long tx list.

Related issues 2 (1 open — 1 closed)

Related to Suricata - Bug #3375: tracking: file tracking/inspection performance issuesAssignedVictor JulienActions
Copied to Suricata - Bug #3403: smb1: 'event only' transactions for bad requests never close (4.1.x)ClosedVictor JulienActions

VJ Updated by Victor Julien over 6 years ago Actions
Copy link
 #2

  • Related to Bug #3375: tracking: file tracking/inspection performance issues added

VJ Updated by Victor Julien over 6 years ago Actions
Copy link
 #3

  • Copied to Bug #3403: smb1: 'event only' transactions for bad requests never close (4.1.x) added
Actions
Copy link

Also available in: PDF Atom