3 commits

Author	SHA1	Message	Date
Jon Siwek	9b12967d40	Improve gap reporting in TCP connections that never see data. ... The previous behavior was to accomodate SYN/FIN/RST-filtered traces by not reporting missing data (via the content_gap event) for such connections. The new behavior always reports gaps for connections that are established and terminate normally, but sequence numbers indicate that all data packets of the connection were missed. The behavior can be reverted by redef'ing "detect_filtered_trace".	2014-01-24 16:21:02 -06:00
Jon Siwek	b828a6ddc7	Review usage of Reporter::InternalError, addresses BIT-1045. ... Replaced some with InternalWarning or InternalAnalyzerError, the later being a new method which signals the analyzer to not process further input. Some usages I just removed if they didn't make sense or clearly couldn't happen. Also did some minor refactors of related code while reviewing/exploring ways to get rid of InternalError usages. Also, for TCP content file write failures there's a new event: "contents_file_write_failure".	2013-10-10 14:45:06 -05:00
Robin Sommer	4bc2ba60c9	Rename analyzer/protocols -> analyzer/protocol	2013-04-19 15:50:57 -07:00

Renamed from src/analyzer/protocols/tcp/TCP_Reassembler.cc (Browse further)