Commit 3497301
committed
dcerpc: update alert count
In the given pcap, the packets that match criteria for sid:1 are 39, 76.
the packets that match the criteria for sid:2 are 36, 73.
However, due to some trailing data at the beginning of the input passed
to the DCERPC parser for the packets 73-76 (request-response pair), they
were disregarded with an error during header parsing causing
app_layer_error exception_policy to trigger.
This no longer exists with the patch for:
Ticket: 72511 parent 47e8ab8 commit 3497301
1 file changed
+20
-0
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
| 21 | + | |
| 22 | + | |
| 23 | + | |
| 24 | + | |
| 25 | + | |
| 26 | + | |
8 | 27 | | |
9 | 28 | | |
10 | 29 | | |
11 | 30 | | |
12 | 31 | | |
| 32 | + | |
13 | 33 | | |
14 | 34 | | |
15 | 35 | | |
| |||
0 commit comments