[Bro-Dev] #566: Binpac analyzers and content gaps

Bro Tracker bro at tracker.bro-ids.org
Tue Aug 23 20:17:57 PDT 2011

#566: Binpac analyzers and content gaps
 Reporter:  gregor   |      Owner:
     Type:  Problem  |     Status:  new
 Priority:  Normal   |  Milestone:  Bro1.7
Component:  BinPAC   |    Version:  git/master
 Keywords:           |
 Binpac analyzers generally do not handle content gaps. In some cases
 content gaps might even lead to excessive memory usage (See #565). It's
 possible to work around this by checking whether there was a gap and not
 delivering any more data to binpac if there was. However, I think that
 maybe binpac should handle this directly. After all, there's a NewGap()
 method in binpac....

 (We might also want to not address this issue and wait for binpac++ to
 solve issues like that)

Ticket URL: <http://tracker.bro-ids.org/bro/ticket/566>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker

More information about the bro-dev mailing list