USArmyResearchLab / Dshell

Dshell is a network forensic analysis framework.
Other
5.45k stars 1.14k forks source link

TCP handshake and port reuse fix #92

Closed dc3-tsd closed 7 years ago

dc3-tsd commented 7 years ago

This is a replacement for an earlier pull request fix #91 that better detects TCP connection closure and better handles unexpected sequence numbers.

dc3-tsd commented 7 years ago

The pull request has been updated based on your feedback. The unnecessary variables were removed from the decoder object and are now only in the connection object.

dev195 commented 7 years ago

Okay, looks good. Thanks for the fix!