Project

General

Profile

Actions

Bug #637

closed

unix socket pcap processing and ip reputation

Added by Victor Julien over 11 years ago. Updated over 11 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

IP rep is stored in Host table. Host table is freed and reinit'd per pcap. This clears IP Rep.

I think a Host reload function should clear the table except for the IP Rep.

Walk the table (see HostGetUsedHost). If a host has a use_cnt > 0 (and h->iprep != NULL but that should always be the case), clear the tag and threshold data, but don't free the host. Otherwise, clear and free the host.

Actions

Also available in: Atom PDF