Ask Your Question
0

MATE config for grouping HTTP2 when multiple streams per packet

asked 2024-04-24 10:02:02 +0000

albertored gravatar image

I have the following MATE configuration:

Pdu http2_pdu Proto http2 Transport tcp/ip {
    Extract addr From ip.addr;
    Extract port From tcp.port;
    Extract streamid From http2.streamid;
    Extract path From http2.headers.path;    
};

Gop http2_req On http2_pdu Match (addr, addr, port, port, streamid) {
    Start (path);
    Extra (path, sbi, src_nf, dst_nf);
};

that works correctly when a packet contains a single stream but fails when packets contain multiple streams.

For instance given:

  • packet 1 -> HEADERS[1]
  • packet 2 -> DATA[1] SETTINGS[0]
  • packet 3 -> HEADERS[1] DATA[1]

packets 1 and 3 are correctly grouped together but packet 2 is left alone because it has 2 different streamid.

Is my analysis correct? Is there a way to avoid this and group all the 3 packets togheter?

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2024-04-24 13:39:11 +0000

Chuckc gravatar image

It's marked as related to a similar issue.
Discussion here: 19799: MATE gop matching fails with multiple occurrences of the same AVP are present

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2024-04-24 10:02:02 +0000

Seen: 74 times

Last updated: Apr 24