stream-tcp-list.c File Reference

#include "suricata-common.h"
#include "rust.h"
#include "stream-tcp-private.h"
#include "stream-tcp.h"
#include "stream-tcp-reassemble.h"
#include "stream-tcp-inline.h"
#include "stream-tcp-list.h"
#include "util-streaming-buffer.h"
#include "util-print.h"
#include "util-validate.h"
#include "app-layer-frames.h"
#include "tests/stream-tcp-list.c"

Include dependency graph for stream-tcp-list.c:

Go to the source code of this file.

Functions
void	StreamTcpReassembleConfigEnableOverlapCheck (void)
	RB_GENERATE (TCPSEG, TcpSegment, rb, TcpSegmentCompare)
int	TcpSegmentCompare (struct TcpSegment *a, struct TcpSegment *b)
	compare function for the Segment tree
int	StreamTcpReassembleInsertSegment (ThreadVars *tv, TcpReassemblyThreadCtx *ra_ctx, TcpStream *stream, TcpSegment *seg, Packet *p, uint8_t *pkt_data, uint16_t pkt_datalen)
void	StreamTcpPruneSession (Flow *f, uint8_t flags)
	Remove idle TcpSegments from TcpSession.

Detailed Description

Segment list functions for insertions, overlap handling, removal and more.

Definition in file stream-tcp-list.c.

Function Documentation

RB_GENERATE()

RB_GENERATE	(	TCPSEG	,
		TcpSegment	,
		rb	,
		TcpSegmentCompare
	)

StreamTcpPruneSession()

void StreamTcpPruneSession	(	Flow *	f,
		uint8_t	flags
	)

Remove idle TcpSegments from TcpSession.

Checks app progress and raw progress and progresses them if needed, slides the streaming buffer, then gets rid of excess segments.

Parameters

f	flow
flags	direction flags

Definition at line 886 of file stream-tcp-list.c.

References TcpStream_::app_progress_rel, AppLayerFramesSlide(), TcpStream_::base_seq, TcpSession_::client, DEBUG_VALIDATE_BUG_ON, flags, TcpStream_::flags, TcpSession_::flags, TcpStream_::log_progress_rel, Flow_::protoctx, TcpStream_::raw_progress_rel, RB_FOREACH_SAFE, TcpStream_::sb, TcpStreamCnf_::sbcnf, SCEnter, SCLogDebug, SCReturn, TcpStream_::seg_tree, TcpSegment::seq, TcpSession_::server, STREAM_BASE_OFFSET, stream_config, StreamingBufferClear(), StreamingBufferSlideToOffset(), STREAMTCP_FLAG_APP_LAYER_DISABLED, STREAMTCP_STREAM_FLAG_DEPTH_REACHED, STREAMTCP_STREAM_FLAG_DISABLE_RAW, STREAMTCP_STREAM_FLAG_NOREASSEMBLY, StreamTcpReturnStreamSegments(), StreamTcpSegmentReturntoPool(), and TCP_SEG_LEN.

Here is the call graph for this function:

StreamTcpReassembleConfigEnableOverlapCheck()

void StreamTcpReassembleConfigEnableOverlapCheck

(

void

)

Definition at line 40 of file stream-tcp-list.c.

StreamTcpReassembleInsertSegment()

int StreamTcpReassembleInsertSegment	(	ThreadVars *	tv,
		TcpReassemblyThreadCtx *	ra_ctx,
		TcpStream *	stream,
		TcpSegment *	seg,
		Packet *	p,
		uint8_t *	pkt_data,
		uint16_t	pkt_datalen
	)

Returns

0 ok

-1 segment not inserted due to memcap issue

Parameters

seg	segment, this function takes total ownership

In case of error, this function returns the segment to the pool

Definition at line 634 of file stream-tcp-list.c.

References TcpReassemblyThreadCtx_::counter_tcp_reass_data_normal_fail, TcpReassemblyThreadCtx_::counter_tcp_reass_data_overlap_fail, TcpReassemblyThreadCtx_::counter_tcp_reass_overlap, TcpReassemblyThreadCtx_::counter_tcp_segment_memcap, IsTcpSessionDumpingEnabled(), likely, TcpSegment::payload_len, RB_FOREACH_SAFE, SC_ENOMEM, SC_OK, SCEnter, SCLogDebug, SCLogDebugEnabled(), SCReturnInt, TcpStream_::seg_tree, TcpSegment::seq, StatsIncr(), StreamTcpSegmentReturntoPool(), TCP_SEG_LEN, and tv.

Referenced by StreamTcpReassembleHandleSegmentHandleData(), StreamTcpUTAddSegmentWithByte(), and StreamTcpUTAddSegmentWithPayload().

Here is the call graph for this function:

Here is the caller graph for this function:

TcpSegmentCompare()

int TcpSegmentCompare	(	struct TcpSegment *	a,
		struct TcpSegment *	b
	)

compare function for the Segment tree

Main sort point is the sequence number. When sequence numbers are equal compare payload_len as well. This way the tree is sorted by seq, and in case of duplicate seqs we are sorted small to large.

Definition at line 51 of file stream-tcp-list.c.

References TcpSegment::payload_len, TcpSegment::seq, SEQ_GT, and SEQ_LT.