disable session reassembly for either/both the directions, only when we have established failed proto detection in both the directions

14 years ago · 55ed6c2a55
parent 4650bf7170
commit 55ed6c2a55
1 changed files with 2 additions and 2 deletions
--- a/src/app-layer.c
+++ b/src/app-layer.c
@ -175,17 +175,17 @@ int AppLayerHandleTCPData(AlpProtoDetectThreadCtx *dp_ctx, Flow *f,
                    if (f->flags & FLOW_TS_PM_PP_ALPROTO_DETECT_DONE) {
                        //ssn->flags |= STREAMTCP_FLAG_APPPROTO_DETECTION_COMPLETED;
                        SCLogDebug("ALPROTO_UNKNOWN flow %p", f);
-                        StreamTcpSetSessionNoReassemblyFlag(ssn, 0);
                    }
                } else {
                    if (f->flags & FLOW_TC_PM_PP_ALPROTO_DETECT_DONE) {
                        //ssn->flags |= STREAMTCP_FLAG_APPPROTO_DETECTION_COMPLETED;
                        SCLogDebug("ALPROTO_UNKNOWN flow %p", f);
-                        StreamTcpSetSessionNoReassemblyFlag(ssn, 1);
                    }
                }
                if (f->flags & FLOW_TS_PM_PP_ALPROTO_DETECT_DONE &&
                    f->flags & FLOW_TC_PM_PP_ALPROTO_DETECT_DONE) {
+                    StreamTcpSetSessionNoReassemblyFlag(ssn, 0);
+                    StreamTcpSetSessionNoReassemblyFlag(ssn, 1);
                    ssn->flags |= STREAMTCP_FLAG_APPPROTO_DETECTION_COMPLETED;
                }
            }