Project

General

Profile

Actions
Copy link

Optimization #7026

open

app-protos: trigger raw stream reassembly

Added by Juliana Fajardini Reichow 4 months ago. Updated 2 months ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

For application layer protocols over TCP that have transactions, we may need to trigger stream reassembly once they have at least one full message parseable, to avoid missing alerts that happen early on in the stream (as seen with #7004).

Subtasks 5 (3 open — 2 closed)

Bug #7000: pgsql: partially incorrect tx_id trackingResolvedJuliana Fajardini ReichowActions
Bug #7001: pgsql: partially incorrect tx_id tracking (7.0.x backport)In ProgressJuliana Fajardini ReichowActions
Optimization #7018: dns/tcp: allow triggering raw stream reassemblyClosedJuliana Fajardini ReichowActions
Optimization #7075: dns/tcp: allow triggering raw stream reassembly (7.0.x backport)ClosedJuliana Fajardini ReichowActions
Optimization #7076: pgsql: trigger raw stream reassembly when tx completedIn ProgressJuliana Fajardini ReichowActions
Actions
Copy link

Also available in: Atom PDF