-
Notifications
You must be signed in to change notification settings - Fork 1.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ssh add first frames 5734 v1 #11340
Ssh add first frames 5734 v1 #11340
Conversation
Ticket: 5734
for SSH packets that mark the end of plaintext
flow, | ||
stream_slice, | ||
input, | ||
(head.pkt_len + 4) as i64, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this right Victor ?
Setting the frame length that gets over the available data so far...
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
if final length is unknown, it should set -1 and update the frame's len when the final length is available
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Final length is known but we do not have the full data yet. You just told me it is ok
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yup
Information: QA ran without warnings. Pipeline 21159 |
Information: QA ran without warnings. Pipeline 21174 |
Clean in #11372 |
Link to ticket: https://redmine.openinfosecfoundation.org/issues/
https://redmine.openinfosecfoundation.org/issues/5734
Describe changes:
SV_BRANCH=OISF/suricata-verify#1932