[ https://bro-tracker.atlassian.net/browse/BIT-1203?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16804#comment-16804 ]
Jon Siwek commented on BIT-1203: -------------------------------- Cool, they make sense to me as well. I was initially going to suggest something to deal w/ pipelining, but I'm becoming convinced that synchronizing/flushing the log upon seeing a new "MAIL FROM" (as it now does) is already enough. Will merge once I finish checking test baseline diffs. > Fixing SMTP state tracking in topic/robin/smtp-fix > -------------------------------------------------- > > Key: BIT-1203 > URL: https://bro-tracker.atlassian.net/browse/BIT-1203 > Project: Bro Issue Tracker > Issue Type: Improvement > Components: Bro > Reporter: Robin Sommer > Assignee: Jon Siwek > Fix For: 2.3 > > Attachments: signature.asc > > > This fixes the case that an SMTP session has multiple mails sent from > the originator but we miss the server's response (e.g., because we > don't see server side packets at all). > topic/robin/smtp-fix in bro and bro-testing-private -- This message was sent by Atlassian JIRA (v6.3-OD-06-017#6327) _______________________________________________ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev