]> git.ipfire.org Git - thirdparty/suricata.git/commit
flow/stream: 'wrong thread' as stream event & counter
authorVictor Julien <victor@inliniac.net>
Fri, 5 Oct 2018 18:38:10 +0000 (20:38 +0200)
committerVictor Julien <victor@inliniac.net>
Sun, 21 Oct 2018 13:27:29 +0000 (15:27 +0200)
commit631ee383bb836f250c43907cb306afdea4e916d2
tree8b530c2a21ef16d0bb92c97319bdb63c6aa2050b
parent588a56c8ba9b5579e885a2f6a601f1baf8e4bdf4
flow/stream: 'wrong thread' as stream event & counter

Set event at most once per flow, for the first 'wrong' packet.

Add 'tcp.pkt_on_wrong_thread' counter. This is incremented for each
'wrong' packet. Note that the first packet for a flow determines
what thread is 'correct'.
rules/stream-events.rules
src/decode-events.c
src/decode-events.h
src/flow.h
src/output-json-flow.c
src/stream-tcp.c
src/stream-tcp.h