Project

General

Profile

Actions
Copy link

Bug #4437

closed

dns: high resource usage on long lived dns connections

Added by Jason Ish almost 3 years ago. Updated almost 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
7.0.0-beta1
Affected Versions:
6.0.2
Effort:
Difficulty:
Label:
Needs backport to 5.0, Needs backport to 6.0

Description

The transaction handling is off for unidirectional protocols like DNS on long lived connections. That is a single TCP/UDP session that receives multiple DNS requests/responses. For DNS this is rare, but some devices do this.

This results in the transaction cleanup trying to remove transactions that have already been removed.

Related issues 2 (0 open — 2 closed)

Copied to Suricata - Bug #4441: 6.0.x: dns: high resource usage on long lived dns connectionsClosedJason IshActions
Copied to Suricata - Bug #4474: 5.0.x: dns: high resource usage on long lived dns connectionsRejectedJason IshActions
Actions
Copy link

Also available in: Atom PDF