zeek/testing/btest/Traces/tcp
Jon Siwek 066473b1f1 Improve analysis of TCP SYN/SYN-ACK reversal situations.
- Since it's just the handshake packets out of order, they're no
  longer treated as partial connections, which some protocol analyzers
  immediately refuse to look at.

- The TCP_Reassembler "is_orig" state failed to change, which led to
  protocol analyzers sometimes using the wrong value for that.

- Add a unit test which exercises the Connection::FlipRoles() code
  path (i.e. the SYN/SYN-ACK reversal situation).

Addresses BIT-1148.
2014-03-11 17:03:59 -05:00
..
fin_retransmission.pcap Improve TCP FIN retransmission handling. 2014-01-24 15:51:58 -06:00
handshake-reorder.trace Improve analysis of TCP SYN/SYN-ACK reversal situations. 2014-03-11 17:03:59 -05:00
miss_end_data.pcap Improve gap reporting in TCP connections that never see data. 2014-01-24 16:21:02 -06:00
rst-inject-rae.trace Fix a case where c$resp$size is misrepresented. Addresses #730. 2012-12-14 17:08:50 -06:00