Project

General

Profile

Actions
Copy link

Bug #3977

closed

Bug #3877: Transaction list grows without bound on parsers that use unidirectional transactions

SNMP: Better handling of unidirectional transactions

Added by Jason Ish about 4 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
6.0.0
Affected Versions:
5.0.3
Effort:
Difficulty:
Label:
Needs backport to 4.1, Needs backport to 5.0

Description

Parsers that create a transaction per message can end up in a state where transactions are never being cleaned up. This will happen when only "to_client" traffic is seen, and appears to only affect UDP protocols. Without any "to_server" traffic, the transaction cleanup routine never considers these transactions for cleanup.

Related issues 1 (0 open — 1 closed)

Copied to Suricata - Bug #4007: SNMP: Better handling of unidirectional transactions (5.0.x)ClosedJason IshActions
Actions
Copy link

Also available in: Atom PDF