Actions
Bug #5877
closedstream: connections time out too early
Affected Versions:
Effort:
Difficulty:
Label:
Description
A mismatch between the state of a connection as Suricata sees it and how the hosts see it can lead to cases where Suricata already times a connection out, while the connection isn't yet ready. In IPS mode Suricata can drop the rest of the connection. If midstream is enabled, the final part of the connection may be picked up again.
Updated by Victor Julien almost 2 years ago
- Status changed from In Progress to Resolved
- Label Needs backport to 6.0 added
Updated by OISF Ticketbot almost 2 years ago
- Label deleted (
Needs backport to 6.0)
Actions