aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix/updates to app layer proto detection

Browse Source
remotes/origin/master-1.2.x
Anoop Saldanha 14 years ago committed by Victor Julien
parent 78e6a7f713
commit bc216a3396
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File

8
src/app-layer.c
Unescape Escape View File

@ -173,17 +173,21 @@ int AppLayerHandleTCPData(AlpProtoDetectThreadCtx *dp_ctx, Flow *f,
if (flags & STREAM_TOSERVER) {
SCLogDebug("alp_proto_ctx.toserver.max_len %u", alp_proto_ctx.toserver.max_len);
if (f->flags & FLOW_TS_PM_PP_ALPROTO_DETECT_DONE) {
ssn->flags |= STREAMTCP_FLAG_APPPROTO_DETECTION_COMPLETED;
//ssn->flags |= STREAMTCP_FLAG_APPPROTO_DETECTION_COMPLETED;
SCLogDebug("ALPROTO_UNKNOWN flow %p", f);
StreamTcpSetSessionNoReassemblyFlag(ssn, 0);
}
} else {
if (f->flags & FLOW_TC_PM_PP_ALPROTO_DETECT_DONE) {
ssn->flags |= STREAMTCP_FLAG_APPPROTO_DETECTION_COMPLETED;
//ssn->flags |= STREAMTCP_FLAG_APPPROTO_DETECTION_COMPLETED;
SCLogDebug("ALPROTO_UNKNOWN flow %p", f);
StreamTcpSetSessionNoReassemblyFlag(ssn, 1);
}
}
if (f->flags & FLOW_TS_PM_PP_ALPROTO_DETECT_DONE &&
f->flags & FLOW_TC_PM_PP_ALPROTO_DETECT_DONE) {
ssn->flags |= STREAMTCP_FLAG_APPPROTO_DETECTION_COMPLETED;
}
}
} else {
SCLogDebug("stream data (len %" PRIu32 " alproto "

Write Preview
Loading…
Cancel
Save