Victor Julien
Victor Julien
Merged in #7839, thanks!
Are there pcaps to test this scenario? If not can you craft them?
Fuzz finds a way to create lots of transactions that are never closed, this is introduced by the changes here.
Could be a case of a missing `AppLayerParserTriggerRawStreamReassembly` after the TCP record has been received.
Merged in #7713, thanks!
Looks like cifuzz found an int handling issue: ``` flow.c:435:53: runtime error: signed integer overflow: 7594870390325015023 * 1000 cannot be represented in type 'long' 13581 #0 0x613662 in FlowEncryptedTrafficUpdate /src/suricata/src/flow.c:435:53...
Merged in #7713, thanks!
Can you push a rebased version of this?
In master we have a new set of counters that I think is more useful ``` flow.end.state.new | Total | 35013 flow.end.state.established | Total | 5342 flow.end.state.closed | Total |...
> So `flow.mgr.new_pruned` is now in `flow.end.state.new`, right ? It's not exactly the same thing, but ya. Flows can be pruned by worker threads too.