Project

General

Profile

Actions
Copy link

Feature #3444

closed

app-layer: signal stream engine about expected data size

Added by Victor Julien almost 5 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
6.0.0beta1
Effort:
Difficulty:
Label:

Description

Currently the TCP based app-layers assemble the buffer they work on themselves. This leads to unnecessary buffering and code complexity. Instead, the app-layer API should allow the parsers to signal to the stream layer below how much data they need before the record is complete.

Related issues 5 (1 open — 4 closed)

Related to Suricata - Feature #3531: app-layer: signal stream engine about expected data size with next characterRejectedActions
Related to Suricata - Optimization #3538: dns: use app-layer incomplete supportClosedJeff LucovskyActions
Related to Suricata - Optimization #3539: rdp: use app-layer incomplete supportClosedZach KellyActions
Related to Suricata - Optimization #3540: krb5: use app-layer incomplete supportAssignedPierre ChifflierActions
Related to Suricata - Optimization #3541: applayertemplate: use app-layer incomplete supportClosedJason IshActions
Actions
Copy link

Also available in: Atom PDF