Project

General

Profile

Actions

Bug #637

closed
VJ EL

unix socket pcap processing and ip reputation

Bug #637: unix socket pcap processing and ip reputation

Added by Victor Julien over 13 years ago. Updated over 13 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

IP rep is stored in Host table. Host table is freed and reinit'd per pcap. This clears IP Rep.

I think a Host reload function should clear the table except for the IP Rep.

Walk the table (see HostGetUsedHost). If a host has a use_cnt > 0 (and h->iprep != NULL but that should always be the case), clear the tag and threshold data, but don't free the host. Otherwise, clear and free the host.

VJ Updated by Victor Julien over 13 years ago Actions #1

  • Priority changed from High to Normal

EL Updated by Eric Leblond over 13 years ago Actions #2

  • % Done changed from 0 to 80

VJ Updated by Victor Julien over 13 years ago Actions #3

  • Status changed from Assigned to Closed
  • % Done changed from 80 to 100

Merged, thanks Eric.

Tested locally that it works.

Actions

Also available in: PDF Atom