Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-09 18:18:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Duplicate TCP segment should trigger tcp_multiple_retransmissions

Browse source
This commit is contained in:
Jeff Barber 2019-07-26 09:51:13 -06:00
parent 9698d8d7cc
commit 4336de6651
8 changed files with 27 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/analyzer/protocol/tcp/TCP.cc
View file

@ -891,6 +891,8 @@ static void init_endpoint(TCP_Endpoint* endpoint, TCP_Flags flags,
// numbering consistent.
endpoint->InitAckSeq(first_seg_seq - 1);
endpoint->InitStartSeq(first_seg_seq - 1);
// But ensure first packet is not marked duplicate
last_seq = first_seg_seq;
}
endpoint->InitLastSeq(last_seq);
@ -1019,7 +1021,7 @@ static int32 update_last_seq(TCP_Endpoint* endpoint, uint32 last_seq,
// ## endpoint->last_seq = last_seq;
endpoint->UpdateLastSeq(last_seq);
else if ( delta_last < 0 && len > 0 )
else if ( delta_last <= 0 && len > 0 )
endpoint->DidRxmit();
return delta_last;