Project

General

Profile

Actions

Support #4585

closed

tcp flow is persistent connection --reassemble question

Added by xinfeng lee over 3 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Affected Versions:
Label:
C

Description

this flow is persistent connection in TCP/IP data transmission.
this is tcp flow stream setting.
Because this flow is a persistent connection in TCP data transmission,the reassemble memory will be depleted。
when strema.reassembly.memcap is reached,tcp flow reassemble will be failed.

I wish it cloud hava a method to solve this flow that release stream reassemble memory.


Files

flow-stream-setting.jpg (34.7 KB) flow-stream-setting.jpg xinfeng lee, 08/16/2021 03:14 AM
flow-tcp-insert-data-failed.jpg (60.1 KB) flow-tcp-insert-data-failed.jpg xinfeng lee, 08/16/2021 03:19 AM
Actions #1

Updated by Victor Julien over 3 years ago

  • Tracker changed from Bug to Support
  • Target version deleted (TBD)
  • Effort deleted (high)
  • Difficulty deleted (high)
Actions #2

Updated by Andreas Herz almost 3 years ago

  • Status changed from New to Assigned
  • Assignee set to xinfeng lee

Can you try this with 6.0.4 as well?
How does your setup look like?

Actions #3

Updated by Victor Julien almost 3 years ago

  • Status changed from Assigned to Feedback

The memcap drop counter suggests some segments are not processed due to memcap being too small.

Actions #4

Updated by Philippe Antoine over 1 year ago

  • Status changed from Feedback to Closed

Closing due to lack of feedback, feel free to reopen with more information

Actions

Also available in: Atom PDF