Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-11 19:18:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

SMTP: Add SMTP_IN_BDAT state

Browse source 
Initially this reused SMTP_IN_DATA, but separating into SMTP_IN_BDAT
to avoid spurious EndData() calls upon a server's reply. The client
should usually continue to send the full in-flight chunk still.
This commit is contained in:
Arne Welzel 2024-01-23 15:03:37 +01:00
parent fbb1a57945
commit 9a510b8035
2 changed files with 14 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/analyzer/protocol/smtp/SMTP.h
View file

@ -35,6 +35,7 @@ enum SMTP_State {
SMTP_QUIT, // 10: after QUIT
SMTP_AFTER_GAP, // 11: after a gap is detected
SMTP_GAP_RECOVERY, // 12: after the first reply after a gap
SMTP_IN_BDAT, // 13: receiving BDAT chunk via plain delivery
};
} // namespace detail
@ -63,7 +64,7 @@ protected:
void UpdateState(int cmd_code, int reply_code, bool orig);
void BeginData(bool orig);
void BeginData(bool orig, detail::SMTP_State new_state = detail::SMTP_IN_DATA);
void EndData();
int ParseCmd(int cmd_len, const char* cmd);