Project

General

Profile

Actions

Feature #3444

closed

app-layer: signal stream engine about expected data size

Added by Victor Julien over 4 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Currently the TCP based app-layers assemble the buffer they work on themselves. This leads to unnecessary buffering and code complexity. Instead, the app-layer API should allow the parsers to signal to the stream layer below how much data they need before the record is complete.


Related issues 5 (1 open4 closed)

Related to Suricata - Feature #3531: app-layer: signal stream engine about expected data size with next characterRejectedActions
Related to Suricata - Optimization #3538: dns: use app-layer incomplete supportClosedJeff LucovskyActions
Related to Suricata - Optimization #3539: rdp: use app-layer incomplete supportClosedZach KellyActions
Related to Suricata - Optimization #3540: krb5: use app-layer incomplete supportAssignedPierre ChifflierActions
Related to Suricata - Optimization #3541: applayertemplate: use app-layer incomplete supportClosedJason IshActions
Actions

Also available in: Atom PDF