diff --git a/src/app-layer-dcerpc-udp.c b/src/app-layer-dcerpc-udp.c index 1892a070cc..8a99c90c53 100644 --- a/src/app-layer-dcerpc-udp.c +++ b/src/app-layer-dcerpc-udp.c @@ -712,7 +712,7 @@ static void DCERPCUDPStateFree(void *s) { void RegisterDCERPCUDPParsers(void) { /** DCERPC */ - AlpProtoAdd(&alp_proto_ctx, IPPROTO_UDP, ALPROTO_DCERPC_UDP, "|04 00|", 2, 0, STREAM_TOCLIENT); + //AlpProtoAdd(&alp_proto_ctx, IPPROTO_UDP, ALPROTO_DCERPC_UDP, "|04 00|", 2, 0, STREAM_TOCLIENT); AlpProtoAdd(&alp_proto_ctx, IPPROTO_UDP, ALPROTO_DCERPC_UDP, "|04 00|", 2, 0, STREAM_TOSERVER); AppLayerRegisterProto("dcerpcudp", ALPROTO_DCERPC_UDP, STREAM_TOSERVER, diff --git a/src/app-layer-dcerpc.c b/src/app-layer-dcerpc.c index a7c129ed1f..917804ae2f 100644 --- a/src/app-layer-dcerpc.c +++ b/src/app-layer-dcerpc.c @@ -1825,7 +1825,7 @@ void DCERPCUpdateTransactionId(void *state, uint16_t *id) { void RegisterDCERPCParsers(void) { /** DCERPC */ - AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_DCERPC, "|05 00|", 2, 0, STREAM_TOCLIENT); + //AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_DCERPC, "|05 00|", 2, 0, STREAM_TOCLIENT); AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_DCERPC, "|05 00|", 2, 0, STREAM_TOSERVER); AppLayerRegisterProto("dcerpc", ALPROTO_DCERPC, STREAM_TOSERVER, diff --git a/src/app-layer-ftp.c b/src/app-layer-ftp.c index 421c3a5f3a..a564fc490a 100644 --- a/src/app-layer-ftp.c +++ b/src/app-layer-ftp.c @@ -265,7 +265,7 @@ void RegisterFTPParsers(void) { AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_FTP, "USER ", 5, 0, STREAM_TOSERVER); AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_FTP, "PASS ", 5, 0, STREAM_TOSERVER); AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_FTP, "PORT ", 5, 0, STREAM_TOSERVER); - AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_FTP, "AUTH SSL", 8, 0, STREAM_TOCLIENT); + //AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_FTP, "AUTH SSL", 8, 0, STREAM_TOCLIENT); AppLayerRegisterProto("ftp", ALPROTO_FTP, STREAM_TOSERVER, FTPParseRequest); diff --git a/src/app-layer-smb.c b/src/app-layer-smb.c index c55731a60b..276672d8e7 100644 --- a/src/app-layer-smb.c +++ b/src/app-layer-smb.c @@ -1371,11 +1371,11 @@ static uint16_t SMBProbingParser(uint8_t *input, uint32_t ilen) void RegisterSMBParsers(void) { /** SMB */ - AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_SMB, "|ff|SMB", 8, 4, STREAM_TOCLIENT); + //AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_SMB, "|ff|SMB", 8, 4, STREAM_TOCLIENT); AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_SMB, "|ff|SMB", 8, 4, STREAM_TOSERVER); /** SMB2 */ - AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_SMB2, "|fe|SMB", 8, 4, STREAM_TOCLIENT); + //AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_SMB2, "|fe|SMB", 8, 4, STREAM_TOCLIENT); AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_SMB2, "|fe|SMB", 8, 4, STREAM_TOSERVER); AppLayerRegisterProto("smb", ALPROTO_SMB, STREAM_TOSERVER, SMBParse); diff --git a/src/app-layer-ssh.c b/src/app-layer-ssh.c index 555cfa1d6d..acfe0ac2b4 100644 --- a/src/app-layer-ssh.c +++ b/src/app-layer-ssh.c @@ -747,7 +747,7 @@ static void SSHStateFree(void *state) void RegisterSSHParsers(void) { /** SSH */ - AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_SSH, "SSH-", 4, 0, STREAM_TOCLIENT); + //AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_SSH, "SSH-", 4, 0, STREAM_TOCLIENT); AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_SSH, "SSH-", 4, 0, STREAM_TOSERVER); AppLayerRegisterProto("ssh", ALPROTO_SSH, STREAM_TOCLIENT, diff --git a/src/app-layer-ssl.c b/src/app-layer-ssl.c index 03fc8219a7..bf5b609161 100644 --- a/src/app-layer-ssl.c +++ b/src/app-layer-ssl.c @@ -868,24 +868,24 @@ void RegisterSSLParsers(void) /* Updated by Anoop Saldanha. Disabled it for now. We'll get back to it * after some tests */ //AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|01 03 00|", 5, 2, STREAM_TOSERVER); - AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|00 02|", 7, 5, STREAM_TOCLIENT); + //AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|00 02|", 7, 5, STREAM_TOCLIENT); /** SSLv3 */ AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|01 03 00|", 3, 0, STREAM_TOSERVER); AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|16 03 00|", 3, 0, STREAM_TOSERVER); /* client hello */ - AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|16 03 00|", 3, 0, STREAM_TOCLIENT); /* server hello */ + //AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|16 03 00|", 3, 0, STREAM_TOCLIENT); /* server hello */ /** TLSv1 */ AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|01 03 01|", 3, 0, STREAM_TOSERVER); AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|16 03 01|", 3, 0, STREAM_TOSERVER); /* client hello */ - AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|16 03 01|", 3, 0, STREAM_TOCLIENT); /* server hello */ + //AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|16 03 01|", 3, 0, STREAM_TOCLIENT); /* server hello */ /** TLSv1.1 */ AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|01 03 02|", 3, 0, STREAM_TOSERVER); AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|16 03 02|", 3, 0, STREAM_TOSERVER); /* client hello */ - AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|16 03 02|", 3, 0, STREAM_TOCLIENT); /* server hello */ + //AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|16 03 02|", 3, 0, STREAM_TOCLIENT); /* server hello */ /** TLSv1.2 */ AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|01 03 03|", 3, 0, STREAM_TOSERVER); AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|16 03 03|", 3, 0, STREAM_TOSERVER); /* client hello */ - AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|16 03 03|", 3, 0, STREAM_TOCLIENT); /* server hello */ + //AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|16 03 03|", 3, 0, STREAM_TOCLIENT); /* server hello */ AppLayerRegisterProto("tls", ALPROTO_TLS, STREAM_TOSERVER, SSLParseClientRecord); diff --git a/src/stream-tcp-reassemble.c b/src/stream-tcp-reassemble.c index ead5dbc869..67f9cf653e 100644 --- a/src/stream-tcp-reassemble.c +++ b/src/stream-tcp-reassemble.c @@ -2601,13 +2601,13 @@ static int StreamTcpReassembleAppLayer (TcpReassemblyThreadCtx *ra_ctx, uint8_t flags = 0; /* check if toserver reassembly has started before reassembling toclient. */ - if (PKT_IS_TOSERVER(p) && - !(ssn->flags & STREAMTCP_FLAG_TOSERVER_REASSEMBLY_STARTED)) - { - SCLogDebug("toserver reassembling is not done yet, so " - "skipping reassembling at the moment for to_client"); - SCReturnInt(0); - } + //if (PKT_IS_TOSERVER(p) && + // !(ssn->flags & STREAMTCP_FLAG_TOSERVER_REASSEMBLY_STARTED)) + //{ + // SCLogDebug("toserver reassembling is not done yet, so " + // "skipping reassembling at the moment for to_client"); + // SCReturnInt(0); + //} SCLogDebug("stream->seg_list %p", stream->seg_list); #ifdef DEBUG @@ -2666,11 +2666,11 @@ static int StreamTcpReassembleAppLayer (TcpReassemblyThreadCtx *ra_ctx, /* Do not perform reassembling of data from server, until the app layer proto has been detected and we have sent atleast one smsg from client data to app layer */ - if (PKT_IS_TOSERVER(p)) { - SCLogDebug("we didn't detected the app layer protocol till " - "yet, so not doing toclient reassembling"); - SCReturnInt(0); - } + //if (PKT_IS_TOSERVER(p)) { + // SCLogDebug("we didn't detected the app layer protocol till " + // "yet, so not doing toclient reassembling"); + // SCReturnInt(0); + //} /* initialize the tmp_ra_base_seq for each new run */ stream->tmp_ra_app_base_seq = stream->ra_app_base_seq; ra_base_seq = stream->tmp_ra_app_base_seq;