mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
9f244fbd1b
Txs flushed by the synthetic flow-timeout pseudo packets at flow end carry no wire direction, and the NFS eve log normalized them - and only them - to the flow direction, while a record completed on a real packet kept the packet direction. One flow then logged the same transaction under two directions, which no other app-layer does: SMB, HTTP and DNS all normalize every record. A gapped v3 READ file tx whose last reply never arrives shows it: logged on the response side, unreachable by request-side (dest port 2049) filters. Normalize on the flow direction for every NFS record and drop the FFR conditional. The v3 pins move with it, since the request and its reply now agree on the record. Ticket: #9265. |
20 hours ago | |
|---|---|---|
| .. | ||
| doxygen | 17 years ago | |
| userguide | 20 hours ago | |
| AUTHORS | 5 years ago | |
| Basic_Setup.txt | 4 months ago | |
| INSTALL | 1 year ago | |
| Makefile.am | 1 year ago | |
| NEWS | 5 years ago | |
| README | 17 years ago | |
| Setting_up_IPSinline_for_Linux.txt | 3 years ago | |
| TODO | 5 years ago | |
| Third_Party_Installation_Guides.txt | 14 years ago | |