mirror of https://github.com/OISF/suricata
detect: don't consider smsgs for no inspect flag
When the PKT_NOPAYLOAD_INSPECTION flag is set, don't apply it to smsgs. This way we can still inspect the outstanding smsgs. The PKT_NOPAYLOAD_INSPECTION is set for encrypted traffic, and is combined with disabling stream reassembly. So we only inspect the smsgs up to the point of the disable detection point.pull/647/merge
parent
ab7677638e
commit
5330b1cae1
Loading…
Reference in New Issue