diff --git a/rust/src/ldap/ldap.rs b/rust/src/ldap/ldap.rs index 4c9c3947d7..a8115f9670 100644 --- a/rust/src/ldap/ldap.rs +++ b/rust/src/ldap/ldap.rs @@ -617,7 +617,7 @@ const PARSER_NAME: &[u8] = b"ldap\0"; #[no_mangle] pub unsafe extern "C" fn SCRegisterLdapTcpParser() { - let default_port = CString::new("389").unwrap(); + let default_port = CString::new("[389, 3268]").unwrap(); let parser = RustParser { name: PARSER_NAME.as_ptr() as *const c_char, default_port: default_port.as_ptr(), @@ -674,7 +674,7 @@ pub unsafe extern "C" fn SCRegisterLdapTcpParser() { #[no_mangle] pub unsafe extern "C" fn SCRegisterLdapUdpParser() { - let default_port = CString::new("389").unwrap(); + let default_port = CString::new("[389, 3268]").unwrap(); let parser = RustParser { name: PARSER_NAME.as_ptr() as *const c_char, default_port: default_port.as_ptr(), diff --git a/suricata.yaml.in b/suricata.yaml.in index 7dd7cb5886..82a72bad0f 100644 --- a/suricata.yaml.in +++ b/suricata.yaml.in @@ -1188,11 +1188,11 @@ app-layer: tcp: enabled: yes detection-ports: - dp: 389 + dp: 389, 3268 udp: enabled: yes detection-ports: - dp: 389 + dp: 389, 3268 # Maximum number of live LDAP transactions per flow # max-tx: 1024