smb: probing parser for start and midstream

The probing parser is more strict at the start of the stream
pull/5948/head
Philippe Antoine 4 years ago committed by Victor Julien
parent 9dc5258a21
commit 1b6e81cd72

@ -1978,8 +1978,10 @@ pub extern "C" fn rs_smb_probe_tcp(flags: u8,
-> i8
{
let slice = build_slice!(input, len as usize);
if rs_smb_probe_tcp_midstream(flags, slice, rdir) == 1 {
return 1;
if flags & STREAM_MIDSTREAM == STREAM_MIDSTREAM {
if rs_smb_probe_tcp_midstream(flags, slice, rdir) == 1 {
return 1;
}
}
match parse_nbss_record_partial(slice) {
Ok((_, ref hdr)) => {

Loading…
Cancel
Save