From 90aef2d6895be2e20c1db026ab09447a776453c2 Mon Sep 17 00:00:00 2001 From: Jason Ish Date: Mon, 8 Jun 2026 15:03:55 -0600 Subject: [PATCH] ftp: register ftp.command buffer at request completion Register ftp.command with the FTP request completion progress so it can be used by firewall rules on the ftp:request_complete hook. Ticket: #8392 (cherry picked from commit bf63c574d355f3f60577a5eb806087ace4e3dd26) --- src/detect-ftp-command.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/detect-ftp-command.c b/src/detect-ftp-command.c index 46681ecc30..ba751ecc8d 100644 --- a/src/detect-ftp-command.c +++ b/src/detect-ftp-command.c @@ -83,8 +83,8 @@ void DetectFtpCommandRegister(void) sigmatch_table[DETECT_FTP_COMMAND].Setup = DetectFtpCommandSetup; sigmatch_table[DETECT_FTP_COMMAND].flags |= SIGMATCH_NOOPT; - g_ftp_cmd_buffer_id = SCDetectHelperBufferMpmRegister( - BUFFER_NAME, BUFFER_DESC, ALPROTO_FTP, STREAM_TOSERVER, DetectFTPCommandGetData); + g_ftp_cmd_buffer_id = SCDetectHelperBufferProgressMpmRegister(BUFFER_NAME, BUFFER_DESC, + ALPROTO_FTP, STREAM_TOSERVER, DetectFTPCommandGetData, FTP_STATE_FINISHED); SCLogDebug("registering " BUFFER_NAME " rule option"); }