Skip to content

Packet bursts caused the Interceptor to silently exit

I've been using the Interceptor to evaluate new flows. Periodically I'll get a burst of UDP packets which overflows the socket's receive buffer. This causes the recv() call in verdict_trigger_cycler to throw an OSError. This is caught, and the thread exits silently.

The symptoms are the system handling packets for a bit, then all of a sudden stopping. The nf_queue fills up and begins to drop.

Edited by Kyle Larose