Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

UpdateConnVal: Avoid FieldOffset() calls

Browse source 
These can be significant if a lot of new connections and or events
are created for which an existing conn val needs updating and otherwise
things are very fast.
This commit is contained in:
Arne Welzel 2023-12-02 23:21:09 +01:00
parent c3762ba9d3
commit 01e305edd8
2 changed files with 13 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

7
src/packet_analysis/protocol/tcp/TCPSessionAdapter.cc
View file

@ -1027,8 +1027,11 @@ void TCPSessionAdapter::FlipRoles() {
}
void TCPSessionAdapter::UpdateConnVal(RecordVal* conn_val) {
auto orig_endp_val = conn_val->GetFieldAs<RecordVal>("orig");
auto resp_endp_val = conn_val->GetFieldAs<RecordVal>("resp");
static const auto& conn_type = zeek::id::find_type<zeek::RecordType>("connection");
static const int origidx = conn_type->FieldOffset("orig");
static const int respidx = conn_type->FieldOffset("resp");
auto* orig_endp_val = conn_val->GetFieldAs<RecordVal>(origidx);
auto* resp_endp_val = conn_val->GetFieldAs<RecordVal>(respidx);
orig_endp_val->Assign(0, orig->Size());
orig_endp_val->Assign(1, orig->state);