You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/rust
Victor Julien f68c255f09 nfs: implement post-GAP transaction cleanup
Close all prior transactions in the direction of the GAP, except the
file xfers. Those use their own logic described below.

After a GAP all normal transactions are closed. File transactions
are left open as they can handle GAPs in principle. However, the
GAP might have contained the closing of a file and therefore it
may remain active until the end of the flow.

This patch introduces a time based heuristic for these transactions.
After the GAP all file transactions are stamped with the current
timestamp. If 60 seconds later a file has seen no update, its marked
as closed.

This is meant to fix resource starvation issues observed in long
running SMB sessions where packet loss was causing GAPs. Due to the
similarity of the NFS and SMB parsers, this issue is fixed for NFS
as well in this patch.

Bug #3424.
Bug #3425.
5 years ago
..
.cargo rust: fix vendor use on MinGW 6 years ago
src nfs: implement post-GAP transaction cleanup 5 years ago
.gitignore rust: build fixes and nom update 8 years ago
Cargo.toml.in rust: set edition to 2018 6 years ago
Makefile.am rust: make clean fixups 6 years ago
cbindgen.toml build: cbindgen 6 years ago
rustfmt.toml rustfmt: use default rustfmt configuration 6 years ago