Project

General

Profile

Actions

Bug #5877

closed
VJ VJ

stream: connections time out too early

Bug #5877: stream: connections time out too early

Added by Victor Julien about 3 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

A mismatch between the state of a connection as Suricata sees it and how the hosts see it can lead to cases where Suricata already times a connection out, while the connection isn't yet ready. In IPS mode Suricata can drop the rest of the connection. If midstream is enabled, the final part of the connection may be picked up again.


Subtasks 1 (0 open1 closed)

Bug #5895: stream: connections time out too early (6.0.x backport)ClosedVictor JulienActions

VJ Updated by Victor Julien about 3 years ago Actions #1

  • Status changed from In Progress to Resolved
  • Label Needs backport to 6.0 added

OT Updated by OISF Ticketbot about 3 years ago Actions #2

  • Subtask #5895 added

OT Updated by OISF Ticketbot about 3 years ago Actions #3

  • Label deleted (Needs backport to 6.0)

VJ Updated by Victor Julien about 3 years ago Actions #4

  • Status changed from Resolved to Closed
Actions

Also available in: PDF Atom