[Snort-devel] [PATCH]: Count discards in DecodeTCP (src/decode.c)

Joshua.Kinard at ...3108... Joshua.Kinard at ...3108...
Fri Aug 12 21:00:56 EDT 2011

Hi snort-devel,

In DecodeUDP, there is a check for Teredo/ESP, and if found, the UDP
header is set to NULL and the 'discards' and 'udisc' counts are
incremented in 'pc' (via a call to PopUdp()).  In DecodeTCP, in the same
check for Teredo/ESP, the TCP header is set to NULL, but neither
'discards' nor 'tdisc' are incremented.  The attached patch fixes this.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: snort-tcp-count-discards.patch
Type: application/octet-stream
Size: 405 bytes
Desc: snort-tcp-count-discards.patch
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20110812/82fd86d1/attachment.obj>

More information about the Snort-devel mailing list