[Bro-Dev] [JIRA] (BIT-1203) Fixing SMTP state tracking in topic/robin/smtp-fix

[Jon Siwek (JIRA)]

    [ https://bro-tracker.atlassian.net/browse/BIT-1203?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16804#comment-16804 ] 

Jon Siwek commented on BIT-1203:
--------------------------------

Cool, they make sense to me as well.  I was initially going to suggest something to deal w/ pipelining, but I'm becoming convinced that synchronizing/flushing the log upon seeing a new "MAIL FROM" (as it now does) is already enough.  Will merge once I finish checking test baseline diffs.

> Fixing SMTP state tracking in topic/robin/smtp-fix
> --------------------------------------------------
>
>                 Key: BIT-1203
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1203
>             Project: Bro Issue Tracker
>          Issue Type: Improvement
>          Components: Bro
>            Reporter: Robin Sommer
>            Assignee: Jon Siwek
>             Fix For: 2.3
>
>         Attachments: signature.asc
>
>
>  This fixes the case that an SMTP session has multiple mails sent from
>  the originator but we miss the server's response (e.g., because we
>  don't see server side packets at all).
> topic/robin/smtp-fix in bro and bro-testing-private



--
This message was sent by Atlassian JIRA
(v6.3-OD-06-017#6327)