Actions
Bug #637
closedunix socket pcap processing and ip reputation
Affected Versions:
Effort:
Difficulty:
Label:
Description
IP rep is stored in Host table. Host table is freed and reinit'd per pcap. This clears IP Rep.
I think a Host reload function should clear the table except for the IP Rep.
Walk the table (see HostGetUsedHost). If a host has a use_cnt > 0 (and h->iprep != NULL but that should always be the case), clear the tag and threshold data, but don't free the host. Otherwise, clear and free the host.
Updated by Victor Julien about 12 years ago
- Priority changed from High to Normal
Updated by Eric Leblond about 12 years ago
- % Done changed from 0 to 80
This is done by https://github.com/inliniac/suricata/pull/227
Updated by Victor Julien about 12 years ago
- Status changed from Assigned to Closed
- % Done changed from 80 to 100
Merged, thanks Eric.
Tested locally that it works.
Actions