Actions
Feature #3531
closed
PA
app-layer: signal stream engine about expected data size with next character
Feature #3531:
app-layer: signal stream engine about expected data size with next character
Status:
Rejected
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:
Description
Currently the TCP based app-layers assemble the buffer they work on themselves. This leads to unnecessary buffering and code complexity. Instead, the app-layer API should allow the parsers to signal to the stream layer below how much data they need before the record is complete.
This can be with a specified length, or with a new expected character, for instance in text protocols such as FTP where we wait for end of line.
Actions