Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Move Conn::set_conn() from connection_state_remove to new_connection

Browse source 
c$conn is often needed for connection events, but it being established
in connection_state_removed can be a problem because event handlers have
to remember to call Con::set_conn().

This commit moves to call Conn::set_conn() in new_connection.

Addresses GH-4202

update logs
This commit is contained in:
Johanna Amann 2025-07-23 09:06:55 +01:00
parent 96f9cc73c3
commit 3e4f67e67c
26 changed files with 4188 additions and 4112 deletions
Download patch file Download diff file Expand all files Collapse all files

8
scripts/base/protocols/conn/main.zeek
View file

@ -295,14 +295,11 @@ function set_conn(c: connection, eoc: bool)
event content_gap(c: connection, is_orig: bool, seq: count, length: count) &priority=5
{
set_conn(c, F);
c$conn$missed_bytes = c$conn$missed_bytes + length;
}
event tunnel_changed(c: connection, e: EncapsulatingConnVector) &priority=5
{
set_conn(c, F);
if ( |e| > 0 )
{
if ( ! c$conn?$tunnel_parents )
@ -312,6 +309,11 @@ event tunnel_changed(c: connection, e: EncapsulatingConnVector) &priority=5
c$tunnel = e;
}
event new_connection(c: connection) &priority=100
{
set_conn(c, F);
}
event connection_state_remove(c: connection) &priority=5
{
set_conn(c, T);