Ticket #50 (closed Patch: Solved)

Opened 3 years ago

Last modified 3 years ago

Error in TCP data length calculation

Reported by: lothar@… Owned by: vern
Priority: Normal Milestone:
Component: Bro Version: 1.5.2
Keywords: Cc:

Description

Hi all,

I tried to access the field tcp_hdr::dl in one of my bro scripts in
order to obtain the TCP payload length. But all the values calculated by
bro seemed to be way too big.

This is due to a missing ntohs() call on the total length field in the
IP-Header in Session.cc. I attached a patch against bro-1.4 that should
fix the problem.

Best regards,

Lothar

Attachments

bropatch.diff Download (1.0 KB) - added by anonymous 3 years ago.

Change History

Changed 3 years ago by anonymous

comment:1 Changed 3 years ago by robin

  • Status changed from new to seen
  • Version changed from 1.4 to 1.5-devel (trunk)

Scheduling patch for merge into trunk.

comment:2 Changed 3 years ago by robin

  • Owner set to vern

comment:3 Changed 3 years ago by robin

  • Status changed from seen to assigned

comment:4 Changed 3 years ago by vern

  • Status changed from assigned to closed
  • Resolution set to Solved
Note: See TracTickets for help on using tickets.