]> git.ipfire.org Git - thirdparty/suricata.git/commit
bypass: add explicit flag in stream engine 2779/head
authorEric Leblond <eric@regit.org>
Tue, 13 Jun 2017 20:32:50 +0000 (22:32 +0200)
committerEric Leblond <eric@regit.org>
Wed, 14 Jun 2017 15:54:33 +0000 (17:54 +0200)
commit26eb49d72130b95a1991484168d263a336c5b19d
tree142beffd2cb53e02c18541ec5700021c36a444b6
parent70808a4f1d87c036b89172a06f5dbc222308ada9
bypass: add explicit flag in stream engine

TCP reassembly is now deactivated more frequently and triggering a
bypass on it is resulting in missing some alerts due forgetting
about packet based signature.

So this patch is introducing a dedicated flag that can be set in
the app layer and transmitted in the streaming to trigger bypass.

It is currently used by the SSL app layer to trigger bypass when
the stream becomes encrypted.
src/app-layer-parser.c
src/app-layer-parser.h
src/app-layer-ssl.c
src/stream-tcp-private.h
src/stream-tcp-reassemble.h
src/stream-tcp.c