Disable printing dreaded app layer error messages to the screen: app layer events are here to safe us.

remotes/origin/master-1.2.x
Victor Julien 13 years ago
parent 132d9d1789
commit f773942ce0

@ -852,7 +852,7 @@ int AppLayerParse(void *local_data, Flow *f, uint8_t proto,
/* Do this check before calling AppLayerParse */
if (flags & STREAM_GAP) {
SCLogDebug("stream gap detected (missing packets), this is not yet supported.");
goto gap;
goto error;
}
/* Get the parser state (if any) */
@ -965,6 +965,7 @@ int AppLayerParse(void *local_data, Flow *f, uint8_t proto,
error:
if (ssn != NULL) {
#ifdef DEBUG
if (FLOW_IS_IPV4(f)) {
char src[16];
char dst[16];
@ -973,8 +974,7 @@ error:
PrintInet(AF_INET, (const void*)&f->dst.addr_data32[0], dst,
sizeof (dst));
SCLogError(SC_ERR_ALPARSER, "Error occured in parsing "
"\"%s\" app layer "
SCLogDebug("Error occured in parsing \"%s\" app layer "
"protocol, using network protocol %"PRIu8", source IP "
"address %s, destination IP address %s, src port %"PRIu16" and "
"dst port %"PRIu16"", al_proto_table[f->alproto].name,
@ -989,19 +989,13 @@ error:
PrintInet(AF_INET6, (const void*)&f->dst.addr_data32, dst6,
sizeof (dst6));
SCLogError(SC_ERR_ALPARSER, "Error occured in parsing "
"\"%s\" app layer "
SCLogDebug("Error occured in parsing \"%s\" app layer "
"protocol, using network protocol %"PRIu8", source IPv6 "
"address %s, destination IPv6 address %s, src port %"PRIu16" and "
"dst port %"PRIu16"", al_proto_table[f->alproto].name,
f->proto, src6, dst6, f->sp, f->dp);
fflush(stdout);
}
}
gap:
if (ssn != NULL) {
#ifdef DEBUG
applayererrors++;
if (f->alproto == ALPROTO_HTTP)
applayerhttperrors++;

Loading…
Cancel
Save