[Bro-Dev] #566: Binpac analyzers and content gaps

[Bro Tracker]

#566: Binpac analyzers and content gaps
---------------------+------------------------
 Reporter:  gregor   |      Owner:
     Type:  Problem  |     Status:  new
 Priority:  Normal   |  Milestone:  Bro1.7
Component:  BinPAC   |    Version:  git/master
 Keywords:           |
---------------------+------------------------
 Binpac analyzers generally do not handle content gaps. In some cases
 content gaps might even lead to excessive memory usage (See #565). It's
 possible to work around this by checking whether there was a gap and not
 delivering any more data to binpac if there was. However, I think that
 maybe binpac should handle this directly. After all, there's a NewGap()
 method in binpac....

 (We might also want to not address this issue and wait for binpac++ to
 solve issues like that)

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/566>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker