|
|
|
@ -324,8 +324,7 @@ int DetectEngineInspectStream(ThreadVars *tv,
|
|
|
|
/* in certain sigs, e.g. 'alert dns', which apply to both tcp and udp
|
|
|
|
/* in certain sigs, e.g. 'alert dns', which apply to both tcp and udp
|
|
|
|
* we can get called for UDP. Then we simply inspect the packet payload */
|
|
|
|
* we can get called for UDP. Then we simply inspect the packet payload */
|
|
|
|
if (p->proto == IPPROTO_UDP) {
|
|
|
|
if (p->proto == IPPROTO_UDP) {
|
|
|
|
return DetectEngineInspectStreamUDPPayload(de_ctx,
|
|
|
|
return DetectEngineInspectStreamUDPPayload(de_ctx, det_ctx, s, smd, f, p);
|
|
|
|
det_ctx, s, smd, f, p);
|
|
|
|
|
|
|
|
/* for other non-TCP protocols we assume match */
|
|
|
|
/* for other non-TCP protocols we assume match */
|
|
|
|
} else if (p->proto != IPPROTO_TCP)
|
|
|
|
} else if (p->proto != IPPROTO_TCP)
|
|
|
|
return DETECT_ENGINE_INSPECT_SIG_MATCH;
|
|
|
|
return DETECT_ENGINE_INSPECT_SIG_MATCH;
|
|
|
|
|