Bug #4007: SNMP: Better handling of unidirectional transactions (5.0.x) - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #4007

closed

Bug #3949: Transaction list grows without bound on parsers that use unidirectional transactions (5.0.x)

SNMP: Better handling of unidirectional transactions (5.0.x)

Added by Jason Ish about 4 years ago. Updated almost 4 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Jason Ish

Target version:

5.0.4

Affected Versions:

5.0.3

Effort:

Difficulty:

Label:

Description

Parsers that create a transaction per message can end up in a state where transactions are never being cleaned up. This will happen when only "to_client" traffic is seen, and appears to only affect UDP protocols. Without any "to_server" traffic, the transaction cleanup routine never considers these transactions for cleanup.

Related issues 1 (0 open — 1 closed)