[
https://bro-tracker.atlassian.net/browse/BIT-1203?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16804#comment-16804
]
Jon Siwek commented on BIT-1203:
--------------------------------
Cool, they make sense to me as well. I was initially going to suggest
something to deal w/ pipelining, but I'm becoming convinced that
synchronizing/flushing the log upon seeing a new "MAIL FROM" (as it now does)
is already enough. Will merge once I finish checking test baseline diffs.
> Fixing SMTP state tracking in topic/robin/smtp-fix
> --------------------------------------------------
>
> Key: BIT-1203
> URL: https://bro-tracker.atlassian.net/browse/BIT-1203
> Project: Bro Issue Tracker
> Issue Type: Improvement
> Components: Bro
> Reporter: Robin Sommer
> Assignee: Jon Siwek
> Fix For: 2.3
>
> Attachments: signature.asc
>
>
> This fixes the case that an SMTP session has multiple mails sent from
> the originator but we miss the server's response (e.g., because we
> don't see server side packets at all).
> topic/robin/smtp-fix in bro and bro-testing-private
--
This message was sent by Atlassian JIRA
(v6.3-OD-06-017#6327)
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev