diff options
| author | David Gibson <david@gibson.dropbear.id.au> | 2023-09-08 11:49:49 +1000 |
|---|---|---|
| committer | Stefano Brivio <sbrivio@redhat.com> | 2023-09-08 09:16:10 +0200 |
| commit | 5fb376de6ef29e2f21b510aec7cfefeba955e26c (patch) | |
| tree | d8ca2faa58c8264b06f72fc765e15f9365eb8d8d /siphash.c | |
| parent | 805dd109a4aaf851d7293d25bad259493836ce5a (diff) | |
| download | passt-5fb376de6ef29e2f21b510aec7cfefeba955e26c.tar passt-5fb376de6ef29e2f21b510aec7cfefeba955e26c.tar.gz passt-5fb376de6ef29e2f21b510aec7cfefeba955e26c.tar.bz2 passt-5fb376de6ef29e2f21b510aec7cfefeba955e26c.tar.lz passt-5fb376de6ef29e2f21b510aec7cfefeba955e26c.tar.xz passt-5fb376de6ef29e2f21b510aec7cfefeba955e26c.tar.zst passt-5fb376de6ef29e2f21b510aec7cfefeba955e26c.zip | |
tcp: Never hash match closed connections
>From a practical point of view, when a TCP connection ends, whether by
FIN or by RST, we set the CLOSED event, then some time later we remove the
connection from the hash table and clean it up. However, from a protocol
point of view, once it's closed, it's gone, and any new packets with
matching addresses and ports are either forming a new connection, or are
invalid packets to discard.
Enforce these semantics in the TCP hash logic by never hash matching closed
connections.
Signed-off-by: David Gibson <david@gibson.dropbear.id.au>
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'siphash.c')
0 files changed, 0 insertions, 0 deletions