Victor Julien

Results 136 comments of Victor Julien

Merged in #7839, thanks!

Are there pcaps to test this scenario? If not can you craft them?

Fuzz finds a way to create lots of transactions that are never closed, this is introduced by the changes here.

Could be a case of a missing `AppLayerParserTriggerRawStreamReassembly` after the TCP record has been received.

Looks like cifuzz found an int handling issue: ``` flow.c:435:53: runtime error: signed integer overflow: 7594870390325015023 * 1000 cannot be represented in type 'long' 13581 #0 0x613662 in FlowEncryptedTrafficUpdate /src/suricata/src/flow.c:435:53...

Merged in #7713, thanks!

In master we have a new set of counters that I think is more useful ``` flow.end.state.new | Total | 35013 flow.end.state.established | Total | 5342 flow.end.state.closed | Total |...

> So `flow.mgr.new_pruned` is now in `flow.end.state.new`, right ? It's not exactly the same thing, but ya. Flows can be pruned by worker threads too.