Project

General

Profile

Actions

Task #3556

open

Task #3553: Tracking: enable GAP recovery for all TCP app-layer protocols

dns: improve GAP recovery

Added by Victor Julien over 3 years ago. Updated over 3 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:

Description

DNS currently expects data after GAP at the start of the post-GAP data. To avoid high cost we can perhaps make the search for the next record a bit efficient for a common case (e.g. only a single query).

Also, it would useful if the parser can notify the stream engine of the record size of the current record, so that when a GAP happens that is smaller than the current record we can know where the next record starts.

Actions #1

Updated by Victor Julien over 3 years ago

  • Description updated (diff)
Actions

Also available in: Atom PDF