]> git.ipfire.org Git - people/ms/suricata.git/commit
http/range: reassemble files from different flows with range
authorPhilippe Antoine <contact@catenacyber.fr>
Thu, 18 Feb 2021 14:03:36 +0000 (15:03 +0100)
committerPhilippe Antoine <contact@catenacyber.fr>
Fri, 24 Sep 2021 13:22:09 +0000 (15:22 +0200)
commite82416a415407a45d2a9c31f9a8eaf4bcdbb3e31
tree09bf424469e06fff84fdccb9b880366af9ef38d9
parent5cb996efcf2248a6a04abfe2bde1dc5115bdfac2
http/range: reassemble files from different flows with range

adds a container, ie a thread safe hash table whose
key is the filename

keep a tree of unordered ranges, up to a memcap limit

adds HTPFileOpenWithRange to handle like HTPFileOpen
if there is a range : open 2 files, one for the whole reassembled,
and one only for the current range
13 files changed:
rules/http-events.rules
src/Makefile.am
src/app-layer-htp-file.c
src/app-layer-htp-file.h
src/app-layer-htp-range.c [new file with mode: 0644]
src/app-layer-htp-range.h [new file with mode: 0644]
src/app-layer-htp.c
src/app-layer-htp.h
src/flow-manager.c
src/suricata.c
src/util-thash.c
src/util-thash.h
suricata.yaml.in