update detection engine to compare flow alproto with sig_alproto, rather than sm alproto.

13 years ago · 3a856fed12
parent 4d38a571cc
commit 3a856fed12
1 changed files with 1 additions and 1 deletions
--- a/src/detect-engine-state.c
+++ b/src/detect-engine-state.c
@ -500,7 +500,7 @@ int DeStateDetectStartDetection(ThreadVars *tv, DetectEngineCtx *de_ctx,
            SCLogDebug("sm %p, sm->next %p", sm, sm->next);

            if (sigmatch_table[sm->type].AppLayerMatch != NULL &&
-                (alproto == sigmatch_table[sm->type].alproto ||
+                (alproto == s->alproto ||
                 alproto == ALPROTO_SMB || alproto == ALPROTO_SMB2) )
            {
                if (alproto == ALPROTO_SMB || alproto == ALPROTO_SMB2) {