detect: Fix FTP bounce detection IP address comparison

Fix the FTP bounce IP address comparison by only converting the IP
parsed from the FTP payload to network order.

Bug: #6087
pull/9001/head
Cole Dishington 2 years ago committed by Victor Julien
parent 4c466ec5f4
commit 746fb50d58

@ -141,7 +141,7 @@ static int DetectFtpbounceMatchArgs(
}
if (noctet == 4) {
/* Different IP than src, ftp bounce scan */
ip = SCByteSwap32(ip);
ip = SCNtohl(ip);
if (ip != ip_orig) {
SCLogDebug("Different ip, so Matched ip:%d <-> ip_orig:%d",

Loading…
Cancel
Save