Project

General

Profile

Actions
Copy link

Task #3556

open
VJ OD

Task #3553: Tracking: enable GAP recovery for all TCP app-layer protocols

dns: improve GAP recovery

Task #3556: dns: improve GAP recovery

Added by Victor Julien about 6 years ago. Updated almost 2 years ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

DNS currently expects data after GAP at the start of the post-GAP data. To avoid high cost we can perhaps make the search for the next record a bit efficient for a common case (e.g. only a single query).

Also, it would useful if the parser can notify the stream engine of the record size of the current record, so that when a GAP happens that is smaller than the current record we can know where the next record starts.

VJ Updated by Victor Julien about 6 years ago Actions
Copy link
 #1

  • Description updated (diff)

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
 #2

  • Target version set to TBD

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
 #3

  • Assignee set to OISF Dev
Actions
Copy link

Also available in: PDF Atom