[Bro-Dev] #803: topic/jsiwek/routing0

Bro Tracker bro at tracker.bro-ids.org
Tue Mar 27 15:05:54 PDT 2012


#803: topic/jsiwek/routing0
---------------------------+------------------------
 Reporter:  jsiwek         |      Owner:
     Type:  Merge Request  |     Status:  new
 Priority:  Normal         |  Milestone:  Bro2.1
Component:  Bro            |    Version:  git/master
 Keywords:                 |
---------------------------+------------------------
 This branch adds improved handling of packets with IPv6 routing type 0
 headers.

 See [f4101b52659e19bea11a94c7e51fcfa501e4317c/bro] for details.

 It seemed important to be able to use the final destination of packets
 with an RH0 as the endpoint of connections in case there's still nodes out
 there that do RH0 processing according to RFC 2460, but I'm also feeling
 like it's a bit wasteful or makes the code more complex than necessary
 since RH0 is deprecated by RFC 5095 anyway and going to be uncommon.  Any
 opinions?

 Would it make sense to just raise a weird (already do that in my changes)
 and stop analyzing a packet that contains an RH0 with non-zero segments
 left on the grounds that it's supposed to be deprecated and the analysis
 isn't going to be correct unless we make extra effort to understand the
 final destination?

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/803>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list