Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-13 20:18:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Removing ack_above_hole event.

Browse source 
This was a subset of content_gap and led to plenty noise.

Addresses BIT-688.
This commit is contained in:
Robin Sommer 2016-07-06 09:12:02 -07:00
parent ca3f7eadbe
commit 75e3f9bc69
6 changed files with 15 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/analyzer/protocol/tcp/functions.bif
View file

@ -91,7 +91,7 @@ function get_resp_seq%(cid: conn_id%): count
## contents of individual packets. Reordering and duplicates are
## removed. If any data is missing, the recording stops at the
## missing data; this can happen, e.g., due to an
## :bro:id:`ack_above_hole` event.
## :bro:id:`content_gap` event.
##
## .. bro:see:: get_contents_file set_record_packets contents_file_write_failure
function set_contents_file%(cid: conn_id, direction: count, f: file%): bool