"Fossies" - the Fresh Open Source Software Archive  

Source code changes of the file "src/service_inspectors/http_inspect/http_msg_section.cc" between
snort3-3.1.36.0.tar.gz and snort3-3.1.38.0.tar.gz

About: Snort 3 is a network intrusion prevention and detection system (IDS/IPS) combining the benefits of signature, protocol and anomaly-based inspection.

http_msg_section.cc  (snort3-3.1.36.0):http_msg_section.cc  (snort3-3.1.38.0)
skipping to change at line 134 skipping to change at line 134
{ {
// Randomize the split point a little bit to make it harder to evade det ection. // Randomize the split point a little bit to make it harder to evade det ection.
// FlushBucket provides pseudo random numbers in the range 128 to 255. // FlushBucket provides pseudo random numbers in the range 128 to 255.
const int random_increment = FlushBucket::get_size() - 192; const int random_increment = FlushBucket::get_size() - 192;
assert((random_increment >= -64) && (random_increment <= 63)); assert((random_increment >= -64) && (random_increment <= 63));
session_data->section_size_target[source_id] = target_size + random_incr ement; session_data->section_size_target[source_id] = target_size + random_incr ement;
session_data->stretch_section_to_packet[source_id] = false; session_data->stretch_section_to_packet[source_id] = false;
} }
} }
bool HttpMsgSection::run_detection(snort::Packet* p)
{
if ((p == nullptr) || !detection_required())
return false;
DetectionEngine::detect(p);
return true;
}
const Field& HttpMsgSection::classic_normalize(const Field& raw, Field& norm, const Field& HttpMsgSection::classic_normalize(const Field& raw, Field& norm,
bool do_path, const HttpParaList::UriParam& uri_param) bool do_path, const HttpParaList::UriParam& uri_param)
{ {
if (norm.length() != STAT_NOT_COMPUTE) if (norm.length() != STAT_NOT_COMPUTE)
return norm; return norm;
if ((raw.length() <= 0) || !UriNormalizer::classic_need_norm(raw, do_path, u ri_param)) if ((raw.length() <= 0) || !UriNormalizer::classic_need_norm(raw, do_path, u ri_param))
{ {
norm.set(raw); norm.set(raw);
return norm; return norm;
 End of changes. 1 change blocks. 
0 lines changed or deleted 8 lines changed or added

Home  |  About  |  Features  |  All  |  Newest  |  Dox  |  Diffs  |  RSS Feeds  |  Screenshots  |  Comments  |  Imprint  |  Privacy  |  HTTP(S)