Project

General

Profile

Actions

Bug #4580

closed

Task #5682: tracking: smb performance issues

smb: large streams can cause large memory moves (memmove)

Added by Jeff Lucovsky about 3 years ago. Updated almost 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Large SMB streams can cause Suricata to move large chunks of memory (multi-tens of megabytes and higher) to make room for newly inbound packets. This seems to happen most often when there are gaps in the stream for which packets arrive later.


Related issues 2 (0 open2 closed)

Related to Suricata - Security #5712: tcp: crafted packets lead to resource starvationClosedVictor JulienActions
Related to Suricata - Security #5700: SCRealloc of large chunk crashes SuricataClosedVictor JulienActions
Actions

Also available in: Atom PDF