Project

General

Profile

Actions
Copy link

Bug #4580

closed
JL VJ

Task #5682: tracking: smb performance issues

smb: large streams can cause large memory moves (memmove)

Bug #4580: smb: large streams can cause large memory moves (memmove)

Added by Jeff Lucovsky over 4 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
7.0.0-rc1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Large SMB streams can cause Suricata to move large chunks of memory (multi-tens of megabytes and higher) to make room for newly inbound packets. This seems to happen most often when there are gaps in the stream for which packets arrive later.

Related issues 2 (0 open — 2 closed)

Related to Suricata - Security #5712: tcp: crafted packets lead to resource starvationClosedVictor JulienActions
Related to Suricata - Security #5700: SCRealloc of large chunk crashes SuricataClosedVictor JulienActions
Actions
Copy link

Also available in: PDF Atom