Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Introduce unknown engine mode and postpone engine query in BPF code #8663

Closed

Conversation

lukashino
Copy link
Contributor

Link to redmine ticket:
Link to redmine ticket:

Describe changes:

  • unknown engine mode
  • BPF code changes

Lukas Sismis added 2 commits March 31, 2023 14:40
Querying an engine mode with an unknown value signals a bug when
the engine mode has not been determined but is already queried by
other functions.

Ticket: OISF#5959
@codecov
Copy link

codecov bot commented Mar 31, 2023

Codecov Report

Merging #8663 (fcbd923) into master (578f328) will decrease coverage by 0.15%.
The diff coverage is 36.84%.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #8663      +/-   ##
==========================================
- Coverage   81.92%   81.77%   -0.15%     
==========================================
  Files         968      968              
  Lines      278942   279008      +66     
==========================================
- Hits       228516   228168     -348     
- Misses      50426    50840     +414     
Flag Coverage Δ
fuzzcorpus 64.02% <33.33%> (-0.44%) ⬇️
suricata-verify 59.77% <33.33%> (+<0.01%) ⬆️
unittests 63.23% <5.26%> (+0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

@suricata-qa
Copy link

WARNING:

ERROR: QA failed on IPS_AFP_drop_chk.

field baseline test %
SURI_TLPW1_stats_chk
.tcp.rst 113181 145045 128.15%
SURI_TLPR1_stats_chk
.flow.memuse 530662072 1121867904 211.41%
IPS_AFP_stats_chk
.flow.end.state.established 550799 583199 105.88%
.flow.end.tcp_state.established 169560 201960 119.11%

Pipeline 12951

@lukashino
Copy link
Contributor Author

Continues in #8667

@lukashino lukashino closed this Apr 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
2 participants