Project

General

Profile

Actions
Copy link

Bug #637

closed

unix socket pcap processing and ip reputation

Added by Victor Julien about 12 years ago. Updated almost 12 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Eric Leblond
Target version:
1.4rc1
Affected Versions:
Effort:
Difficulty:
Label:

Description

IP rep is stored in Host table. Host table is freed and reinit'd per pcap. This clears IP Rep.

I think a Host reload function should clear the table except for the IP Rep.

Walk the table (see HostGetUsedHost). If a host has a use_cnt > 0 (and h->iprep != NULL but that should always be the case), clear the tag and threshold data, but don't free the host. Otherwise, clear and free the host.

Actions
Copy link

Also available in: Atom PDF