]> git.ipfire.org Git - people/ms/suricata.git/commit
filestore: store chunks in packet direction
authorVictor Julien <victor@inliniac.net>
Thu, 18 Mar 2021 13:38:33 +0000 (14:38 +0100)
committerVictor Julien <victor@inliniac.net>
Wed, 1 Sep 2021 06:33:52 +0000 (08:33 +0200)
commitca124b033ef408501897e0517eaf79d2196c68d9
treec790d17ded6503fc58b0b1677e21e2dd64f288d7
parentc78f5ac3169e8b4539c49fde9d9aa8fa8465f40e
filestore: store chunks in packet direction

Storing too early can lead to files being considered TRUNCATED if the
TCP state is not yet CLOSED when logging is triggered. This has been
observed with FTP-DATA and might also be an issue with simple HTTP.
src/output-filedata.c