pd: don't reverse flow if TCP session not midstream

5 years ago · a272e433a8
parent 5f1d21f247
commit a272e433a8
1 changed files with 1 additions and 1 deletions
--- a/src/app-layer.c
+++ b/src/app-layer.c
@ -358,7 +358,7 @@ static int TCPProtoDetect(ThreadVars *tv,
        /* if protocol detection indicated that we need to reverse
         * the direction of the flow, do it now. We flip the flow,
         * packet and the direction flags */
-        if (reverse_flow) {
+        if (reverse_flow && (ssn->flags & STREAMTCP_FLAG_MIDSTREAM)) {
            SCLogDebug("reversing flow after proto detect told us so");
            PacketSwap(p);
            FlowSwap(f);