UDP: inspection app layer state as soon as we have it.

12 years ago · 3b68a9d1c6
parent f15d97b916
commit 3b68a9d1c6
1 changed files with 1 additions and 1 deletions
--- a/src/detect.c
+++ b/src/detect.c
@ -1242,7 +1242,7 @@ int SigMatchSignatures(ThreadVars *th_v, DetectEngineCtx *de_ctx, DetectEngineTh
            /* Retrieve the app layer state and protocol and the tcp reassembled
             * stream chunks. */
            if ((p->proto == IPPROTO_TCP && (p->flags & PKT_STREAM_EST)) ||
-                (p->proto == IPPROTO_UDP && (p->flowflags & FLOW_PKT_ESTABLISHED)) ||
+                (p->proto == IPPROTO_UDP) ||
                (p->proto == IPPROTO_SCTP && (p->flowflags & FLOW_PKT_ESTABLISHED)))
            {
                alstate = AppLayerGetProtoStateFromPacket(p);