Project

General

Profile

Actions

Bug #637

closed

unix socket pcap processing and ip reputation

Added by Victor Julien about 10 years ago. Updated about 10 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

IP rep is stored in Host table. Host table is freed and reinit'd per pcap. This clears IP Rep.

I think a Host reload function should clear the table except for the IP Rep.

Walk the table (see HostGetUsedHost). If a host has a use_cnt > 0 (and h->iprep != NULL but that should always be the case), clear the tag and threshold data, but don't free the host. Otherwise, clear and free the host.

Actions #1

Updated by Victor Julien about 10 years ago

  • Priority changed from High to Normal
Actions #2

Updated by Eric Leblond about 10 years ago

  • % Done changed from 0 to 80
Actions #3

Updated by Victor Julien about 10 years ago

  • Status changed from Assigned to Closed
  • % Done changed from 80 to 100

Merged, thanks Eric.

Tested locally that it works.

Actions

Also available in: Atom PDF