mirror of
https://github.com/zeek/zeek.git
synced 2025-10-17 05:58:20 +00:00
Fix the way that child analyzers are added.
Bro contains functionality to add child analyzers delayed, so that an just added analyzer does not influence the list of current analyzers (which, in some combinations of mostly UDP and traffic replay by PIA can lead to duplicate packets sent to the analyzer). Sadly, this feature was broken sometime in the past, leading to the aforementioned duplicate packets. Re-enabling this also necessitated some changes in the analyzer manager, which immediately timed out all connections when that feature was re-enabled. There currently is no testcase (this is a bit hard to trigger); however, I will add one with a later fix for DTLS.
This commit is contained in:
parent
4851cbc7cc
commit
bc868d72a1
3 changed files with 19 additions and 9 deletions
|
@ -427,6 +427,10 @@ public:
|
|||
|
||||
/**
|
||||
* Returns a list of all direct child analyzers.
|
||||
*
|
||||
* Note that this does not include the list of analyzers that are
|
||||
* currently queued up to be added. If you just added an analyzer,
|
||||
* it will not immediately be in this list.
|
||||
*/
|
||||
const analyzer_list& GetChildren() { return children; }
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue