mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
af1714853f
When http_reply events are received before http_request events, either through faking traffic or possible re-ordering, it is possible to trigger unbounded state growth due to later http_requests never being matched again with responses. Prevent this by synchronizing request/response counters when late requests come in. Also forcefully flush pending requests when http_replies are never observed either due to the analyzer having been disabled or because half-duplex traffic. Fixes #1705
4 lines
165 B
Text
4 lines
165 B
Text
### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
|
|
http_state pending, 100
|
|
total http.log lines
|
|
1000
|