[Snort-devel] Re: Snort 2.0 build 45 core dump and fix
cmg at ...402...
Fri Jan 24 12:08:29 EST 2003
"Lawrence Reed" <Lawrence.Reed at ...1489...> writes:
>>That communication path needs to be cleaned up.
> The reason I didn't do that is so that when the action from
> UpdateState is *_FLUSH_STREAM| DROP_SESSION the current packet gets
> put onto the stream before the flush happens ( form inside TcpAction).
> The FlushStream does call BuildPacket and therefore process the
> reassembled data. Is this wrong?
Nope. That makes perfect sense. Tis why I try to talk before fixing
these things :)
Otherwise, we're checking that we should flush before we store more
data. I'll check these out in a bit.
Chris Green <cmg at ...402...>
Warning: time of day goes back, taking countermeasures.
More information about the Snort-devel