Kick out streams with gaps in them in the app layer parser until we add proper support.

remotes/origin/master-1.0.x
Victor Julien 16 years ago
parent 6abcb0d1fd
commit 9676273e6d

@ -707,6 +707,11 @@ int AppLayerParse(Flow *f, uint8_t proto, uint8_t flags, uint8_t *input,
uint16_t parser_idx = 0;
AppLayerProto *p = &al_proto_table[proto];
if (flags & STREAM_GAP) {
SCLogDebug("stream gap detected (missing packets), this is not yet supported.");
goto error;
}
TcpSession *ssn = f->protoctx;
if (ssn == NULL) {
SCLogDebug("no TCP session");

Loading…
Cancel
Save