]> git.ipfire.org Git - thirdparty/snort3.git/commit
Pull request #4142: CSCwh95127 - Skip initial seglist holes for midstream flows in...
authorDavis McPherson -X (davmcphe - XORIANT CORPORATION at Cisco) <davmcphe@cisco.com>
Mon, 22 Jan 2024 23:56:50 +0000 (23:56 +0000)
committerSteven Baigal (sbaigal) <sbaigal@cisco.com>
Mon, 22 Jan 2024 23:56:50 +0000 (23:56 +0000)
commitae6d7ec4621e548d88314718f20acd4b628155aa
treeebbaaaadc202030726b37b98ff454d36f55f6eba
parentb138e954fa8668ab0fbcc63c6edc2491d04112d4
Pull request #4142: CSCwh95127 - Skip initial seglist holes for midstream flows in IPS mode

Merge in SNORT/snort3 from ~DAVMCPHE/snort3:ips_seglist_hole_cscwh95127 to master

Squashed commit of the following:

commit 24510aba30c9cb8681d8bef03fb9b7d7ba2692f2
Author: davis mcpherson <davmcphe@cisco.com>
Date:   Fri Dec 8 14:46:11 2023 -0500

    stream_tcp:  on midstream pickup the peer that received the initial midstream packet remains in
    MID_STREAM_RECV state until a packet with an ACK is sent by that peer. Data packets received are added
    to the seglist but reassembly is not initiated.  When the ACK is seen the seglist is scanned for holes
    left of the ACK and all packets left of the holes are purged and reassembly started with the first
    packet to the right of the hole

    set packet direction flag based on direction saved in reassembly state
13 files changed:
src/stream/paf.h
src/stream/tcp/tcp_reassembler.cc
src/stream/tcp/tcp_reassembler.h
src/stream/tcp/tcp_reassemblers.h
src/stream/tcp/tcp_session.cc
src/stream/tcp/tcp_session.h
src/stream/tcp/tcp_state_listen.cc
src/stream/tcp/tcp_state_mid_stream_recv.cc
src/stream/tcp/tcp_state_mid_stream_sent.cc
src/stream/tcp/tcp_state_none.cc
src/stream/tcp/tcp_stream_session.h
src/stream/tcp/tcp_stream_tracker.cc
src/stream/tcp/tcp_stream_tracker.h