Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Pgsql cancel req 6577/v2 #10019

Closed
wants to merge 2 commits into from

Conversation

jufajardini
Copy link
Contributor

Previous PR: #10000 <3

Link to redmine ticket:
https://redmine.openinfosecfoundation.org/issues/6577

Describe changes:

  • indicate in the log message that it's a cancel request message
  • create new tx if state is cancel request received (as those are received in a new connection, which means a new flow, for Suri, and wouldn't be considered, otherwise)

TODO:

  • document
  • update json schema?

To consider.i: Given what was indicated above, I don't think we can easily correlate the cancel request message with the other tx, as it's from a different flow altogether
To consider.ii: if we should create an event in case a cancel request is sent with invalid (fake pid and backend key) data, and how would that work, if different flows

SV_BRANCH=OISF/suricata-verify#1530

This is called so many times that it seems to make sense that we use a
function for this.
This message can occur in a few different scenarios, so it's important
that the parser can properly recognize it.

TODO:
 - check/bind cancel request message to correct transaction/state based on
  pid/backend_key? -- not sure we can
- Add documentation, might be the only thing missing, for now. For
  later, when we have events, we might want to include those here.

Task OISF#6577
@suricata-qa
Copy link

WARNING:

field baseline test %
build_asan

Pipeline 16966

@jufajardini
Copy link
Contributor Author

Replaced by: #10036

@jufajardini jufajardini deleted the pgsql-cancel-req-6577/v2 branch December 15, 2023 15:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants