on failed alproto detection on both sides, only disable app layer inspection. No reassembly disabling for any direction

remotes/origin/master-1.2.x
Anoop Saldanha 14 years ago committed by Victor Julien
parent c9960473bb
commit 08bd8ec4e2

@ -170,22 +170,9 @@ int AppLayerHandleTCPData(AlpProtoDetectThreadCtx *dp_ctx, Flow *f,
r = AppLayerParse(f, alproto, flags, data, data_len); r = AppLayerParse(f, alproto, flags, data, data_len);
PACKET_PROFILING_APP_END(dp_ctx, alproto); PACKET_PROFILING_APP_END(dp_ctx, alproto);
} else { } else {
if (flags & STREAM_TOSERVER) {
SCLogDebug("alp_proto_ctx.toserver.max_len %u", alp_proto_ctx.toserver.max_len);
if (f->flags & FLOW_TS_PM_PP_ALPROTO_DETECT_DONE) {
//ssn->flags |= STREAMTCP_FLAG_APPPROTO_DETECTION_COMPLETED;
SCLogDebug("ALPROTO_UNKNOWN flow %p", f);
}
} else {
if (f->flags & FLOW_TC_PM_PP_ALPROTO_DETECT_DONE) {
//ssn->flags |= STREAMTCP_FLAG_APPPROTO_DETECTION_COMPLETED;
SCLogDebug("ALPROTO_UNKNOWN flow %p", f);
}
}
if (f->flags & FLOW_TS_PM_PP_ALPROTO_DETECT_DONE && if (f->flags & FLOW_TS_PM_PP_ALPROTO_DETECT_DONE &&
f->flags & FLOW_TC_PM_PP_ALPROTO_DETECT_DONE) { f->flags & FLOW_TC_PM_PP_ALPROTO_DETECT_DONE) {
StreamTcpSetSessionNoReassemblyFlag(ssn, 0); FlowSetSessionNoApplayerInspectionFlag(f);
StreamTcpSetSessionNoReassemblyFlag(ssn, 1);
ssn->flags |= STREAMTCP_FLAG_APPPROTO_DETECTION_COMPLETED; ssn->flags |= STREAMTCP_FLAG_APPPROTO_DETECTION_COMPLETED;
} }
} }

Loading…
Cancel
Save