Project

General

Profile

Actions

Bug #7000

open

Optimization #7026: app-protos: trigger raw stream reassembly

pgsql: partially incorrect tx_id tracking

Added by Juliana Fajardini Reichow 4 months ago. Updated 8 days ago.

Status:
Resolved
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

When a new PgsqlTransaction was created, the tx_id was adjusted to start at 1.
Disconsidering this, get_tx and free_tx were still incrementing tx_id when performing their logics,
leading to discrepancies when logging alert metadata for pgsql (to name one that we were able to notice).

This might also happen with template.rs, will investigate.
---------------
Update: turns out that the template code also takes this into consideration, as well as the core of the engine.

So the solution here was actually to trigger the raw stream reassembly earlier, so, I added this one as a sub ticket of #7026


Subtasks 1 (1 open0 closed)

Bug #7001: pgsql: partially incorrect tx_id tracking (7.0.x backport)In ProgressJuliana Fajardini ReichowActions

Related issues 3 (2 open1 closed)

Related to Suricata - Bug #7004: app-layer: wrong tx may be logged for stream rulesIn ProgressJuliana Fajardini ReichowActions
Related to Suricata - Optimization #7018: dns/tcp: allow triggering raw stream reassemblyClosedJuliana Fajardini ReichowActions
Related to Suricata - Bug #7113: pgsql: track 'progress' in tx per directionAssignedJuliana Fajardini ReichowActions
Actions #1

Updated by OISF Ticketbot 4 months ago

  • Subtask #7001 added
Actions #2

Updated by OISF Ticketbot 4 months ago

  • Label deleted (Needs backport to 7.0)
Actions #3

Updated by Juliana Fajardini Reichow 4 months ago

  • Status changed from In Progress to In Review
Actions #4

Updated by Juliana Fajardini Reichow 4 months ago

According to further investigation by Jason, it doesn't seem that the fix is needed for template.rs (cf https://github.com/OISF/suricata/pull/10997#discussion_r1585608422)

Actions #5

Updated by Jason Ish 4 months ago

  • Related to Bug #7004: app-layer: wrong tx may be logged for stream rules added
Actions #6

Updated by Juliana Fajardini Reichow 4 months ago

Actions #7

Updated by Juliana Fajardini Reichow 3 months ago

  • Status changed from In Review to Resolved
Actions #8

Updated by Juliana Fajardini Reichow 3 months ago

  • Parent task set to #7026

The solution here was actually to trigger the raw stream reassembly earlier, so, I'll add this one as a subticket of #7026

Actions #9

Updated by Victor Julien 3 months ago

  • Related to Bug #7113: pgsql: track 'progress' in tx per direction added
Actions #10

Updated by Juliana Fajardini Reichow 8 days ago

  • Description updated (diff)
Actions

Also available in: Atom PDF