Project

General

Profile

Actions
Copy link

Optimization #4318

open
SB OD

app-layer: "close" all txs if protocol reaches error state

Optimization #4318: app-layer: "close" all txs if protocol reaches error state

Added by Shivani Bhardwaj over 5 years ago. Updated over 3 years ago.

Status:
Assigned
Priority:
Low
Assignee:
OISF Dev
Target version:
TBD
Effort:
high
Difficulty:
high
Label:

Description

Currently, in case there was a mis-detection of protocol or something led to incomplete data error in a protocol parser, the cleanup is not done properly.
Victor says "we should have logic that "closes" all txs (marks them as done), or handle this in the lower layers"
This came up when DCE/RPC over UDP packet was misdetected as Wireguard protocol and took too much of processing power.

Actions
Copy link

Also available in: PDF Atom