mirror of
https://github.com/zeek/zeek.git
synced 2025-10-05 08:08:19 +00:00
GH-998: Fix Reporter::conn_weird() to handle expired connections
This introduces a new sampling state-map for expired connections to fix segfaults that previously occured when passing in a `connection` record to `Reporter::conn_weird()` for which the internal `Connection` object had already been expired and deleted. This also introduces a new event called `expired_conn_weird`, which is similar to `conn_weird`, except the full `connection` record is no longer available, just the `conn_id` and UID string.
This commit is contained in:
parent
8d9e85b842
commit
51e738a1c0
9 changed files with 163 additions and 5 deletions
|
@ -19,6 +19,7 @@ const char* TimerNames[] = {
|
|||
"ConnectionExpireTimer",
|
||||
"ConnectionInactivityTimer",
|
||||
"ConnectionStatusUpdateTimer",
|
||||
"ConnTupleWeirdTimer",
|
||||
"DNSExpireTimer",
|
||||
"FileAnalysisInactivityTimer",
|
||||
"FlowWeirdTimer",
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue