[Bro-Dev] [JIRA] (BIT-1148) Bug in Connection::FlipRoles
Jon Siwek (JIRA)
jira at bro-tracker.atlassian.net
Thu Mar 6 15:04:18 PST 2014
Jon Siwek created BIT-1148:
Summary: Bug in Connection::FlipRoles
Project: Bro Issue Tracker
Issue Type: Problem
Affects Versions: 2.2
Reporter: Jon Siwek
Fix For: 2.3
This method doesn't correctly swap address values.
Also, since scheduled analyzers for a connection are looked up based on the endpoint addresses, it's possible they will miss being attached to connections that end up taking the Connection::FlipRoles code path. An idea to fix would be just to have FlipRoles do a check for scheduled analyzers on the new connection tuple and attach any that turn up.
(These were reported by Kevin McMahon on the bro-dev list).
This message was sent by Atlassian JIRA
More information about the bro-dev