Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

next/351/20240316/v1 #10654

Merged
merged 14 commits into from
Mar 18, 2024
Merged

Conversation

victorjulien
Copy link
Member

Needed a workaround cast for RBTREE use.
Modeled after the same option in eve/alert. Defaults to 4k.
This avoids looping over partly duplicate segments that cause
output data corruption by logging parts of the stream data multiple
times.

For data with GAPs now add a indicator '[4 bytes missing]' similar
to how Wireshark does it.

Bug: OISF#6553.
Don't init buffer to 0 size but use the desired default of 4k.
In preparation of stream logging changes.
Log using stream callback API, meaning that data will also
be logged if there are GAPs.

Also implement GAP indicators: '[123 bytes missing]'.
For better readability and type checking.
@victorjulien victorjulien requested a review from a team as a code owner March 16, 2024 19:10
Copy link

codecov bot commented Mar 16, 2024

Codecov Report

Attention: Patch coverage is 86.01399% with 20 lines in your changes are missing coverage. Please review.

Project coverage is 82.67%. Comparing base (e41c2f1) to head (ff8597d).

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #10654      +/-   ##
==========================================
- Coverage   82.69%   82.67%   -0.02%     
==========================================
  Files         926      926              
  Lines      247574   247613      +39     
==========================================
+ Hits       204719   204725       +6     
- Misses      42855    42888      +33     
Flag Coverage Δ
fuzzcorpus 64.02% <81.11%> (-0.02%) ⬇️
suricata-verify 61.92% <84.61%> (+0.04%) ⬆️
unittests 62.19% <0.69%> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

@suricata-qa
Copy link

Information: QA ran without warnings.

Pipeline 19542

Copy link
Member

@inashivb inashivb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 🚀

@victorjulien victorjulien merged commit ff8597d into OISF:master Mar 18, 2024
45 checks passed
@victorjulien victorjulien mentioned this pull request Mar 18, 2024
@victorjulien victorjulien deleted the next/351/20240316/v1 branch March 18, 2024 09:03
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

3 participants