Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fastlog icmp code 3266 v3 #4363

Closed

Conversation

catenacyber
Copy link
Contributor

Link to redmine ticket:
https://redmine.openinfosecfoundation.org/issues/3266

Describe changes:

  • restricts one variable scope
  • Uses icmp type and code instead of port from union when logging to fast.log

Modifies #4336 with using the previous format : -> :
And using snake_case

@catenacyber catenacyber requested a review from a team as a code owner November 12, 2019 21:05
if (likely(decoder_event == 0)) {
char proto[16] = "";
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looking at this it seems we can do a small optimization by moving this 'proto' to the start of the func and just setting it once. We can have multiple alerts for a packet, but the ip proto will never change.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok, but should it be part of this PR ?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lets do it in a separate one.

@victorjulien victorjulien mentioned this pull request Dec 5, 2019
@victorjulien
Copy link
Member

Merged in #4420, thanks Philippe!

@catenacyber catenacyber deleted the fastlog-icmp-code-3266-v3 branch March 5, 2020 21:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
2 participants