-
Notifications
You must be signed in to change notification settings - Fork 37
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Provide a mechanism to synchronize two parse streams #1328
Comments
I'm thinking to introduce the concept of a Constructor:
Methods:
When a barrier destructs, all currently still waiting parties would receive a In a
|
This issue has been mentioned on Zeek. There might be relevant details there: https://community.zeek.org/t/need-help-for-spicy-analyzer/7126/2 |
The BinPac SSH analyzer in Zeek could leverage this feature as it has stream parsing dependencies to |
And additional consideration for the barrier type is setups where traffic from just one side is visible (half-duplex traffic). This shouldn't cause indefinite buffering and likely raise parse errors after some amount of time/buffering. |
Use case is two sides of a connection where the parsing results from one side determine how the other side should proceed (e.g.,
STARTTLS
by the client needs to be acked by the server before the TLS actually kicks in). Currently one needs to manually buffer any further data until the information about how to proceed becomes available, which is both very cumbersome and inefficient. The current thought is to introduce a semaphore-like mechanism that allows one side to wait for the other, yielding in the meantime. Details to be figured out.The text was updated successfully, but these errors were encountered: