Quit carving when sending a block fails by zwass · Pull Request #8733 · osquery/osquery
Currently we log (only in --verbose) an error and then continue sending blocks. But there's not really much point in continuing to send blocks if the server failed a block because it won't be able to piece the archive back together. What we really need is a refactor to allow proper retries, but this at least makes the current behavior more clear and removes inefficient continued block sends that won't lead to a successful carve.
zwass
deleted the
carver-error
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters