From ac8b08771770ab0f0f5112c84c499771f5fb746e Mon Sep 17 00:00:00 2001
From: Ludovico Cavedon <cavedon@lastline.com>
Date: Sat, 1 Dec 2012 15:29:06 -0800
Subject: [PATCH] Wait until both sides close the TCP connection before
 initiating cleanup

---
 src/stream-tcp-reassemble.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/stream-tcp-reassemble.c b/src/stream-tcp-reassemble.c
index b188e496b5..fd0255d60e 100644
--- a/src/stream-tcp-reassemble.c
+++ b/src/stream-tcp-reassemble.c
@@ -2631,7 +2631,7 @@ static int StreamTcpReassembleAppLayer (ThreadVars *tv,
     {
         /* send an empty EOF msg if we have no segments but TCP state
          * is beyond ESTABLISHED */
-        if (ssn->state > TCP_ESTABLISHED) {
+        if (ssn->state >= TCP_CLOSING) {
             SCLogDebug("sending empty eof message");
             /* send EOF to app layer */
             STREAM_SET_FLAGS(ssn, stream, p, flags);