Project

General

Profile

Actions

Bug #3977

closed

Bug #3877: Transaction list grows without bound on parsers that use unidirectional transactions

SNMP: Better handling of unidirectional transactions

Added by Jason Ish over 4 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:
Needs backport to 4.1, Needs backport to 5.0

Description

Parsers that create a transaction per message can end up in a state where transactions are never being cleaned up. This will happen when only "to_client" traffic is seen, and appears to only affect UDP protocols. Without any "to_server" traffic, the transaction cleanup routine never considers these transactions for cleanup.


Related issues 1 (0 open1 closed)

Copied to Suricata - Bug #4007: SNMP: Better handling of unidirectional transactions (5.0.x)ClosedJason IshActions
Actions

Also available in: Atom PDF