mirror of
https://github.com/zeek/zeek.git
synced 2025-10-05 08:08:19 +00:00
Fix a bug in the core files framework with handling the BOF buffer.
- Any files where the total size was below the size of the default bof_buffer size couldn't have stream analyzers successfully attached because the bof_buffer never reached the full size and was never flushed. This branch explicitly marks the buf_buffer as full and flushes it when the file is being removed.
This commit is contained in:
parent
565ad360c6
commit
a97cd1f3a2
3 changed files with 27 additions and 7 deletions
|
@ -0,0 +1,6 @@
|
|||
# @TEST-EXEC: bro -r $TRACES/http/get.trace %INPUT
|
||||
# @TEST-EXEC: btest-diff files.log
|
||||
|
||||
@load frameworks/files/hash-all-files
|
||||
|
||||
redef default_file_bof_buffer_size=5000;
|
Loading…
Add table
Add a link
Reference in a new issue