Project

General

Profile

Actions

Bug #7440

closed

eve/frame: incomplete frame logging

Added by Victor Julien about 2 months ago. Updated 8 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

In certain cases frames are logged while they are still getting updated, and the log can contain incomplete data.

This is caused by disregarding the "unknown length" state for a frame during logging, but when adding this condition incomplete frames can fail to get logged at flow timeout. A solution will likely involve making the flow timeout logic aware of frames still needing work.

Actions

Also available in: Atom PDF