Project

General

Profile

Actions

Bug #71

closed

Abort in Defrag4Reassmble on startup.

Added by Will Metcalf almost 15 years ago. Updated almost 15 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

I'm seeing this quite a bit at startup on networks that have frags. Maybe because the engine is coming in after the conversation has already started? If I extract traffic from a pcap for the matching ip addy's as seen in the bracktrace output and replay it I do not get the same abort.

suricata: defrag.c:788: Defrag4Reassemble: Assertion `!(rp->ip4h == ((void *)0))' failed.


Files

0001-Fix-issue-71.patch (21.7 KB) 0001-Fix-issue-71.patch Jason Ish, 02/01/2010 01:14 PM
Actions

Also available in: Atom PDF