From a68eec630f26967943d5d712b657f460d6d7c696 Mon Sep 17 00:00:00 2001
From: Victor Julien <victor@inliniac.net>
Date: Wed, 15 Aug 2018 12:15:26 +0200
Subject: [PATCH] detect/parse: try to set flow direction for sigs w/o explict
 app proto as well

---
 src/detect-parse.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/detect-parse.c b/src/detect-parse.c
index 34a3f75881..437e4dfecd 100644
--- a/src/detect-parse.c
+++ b/src/detect-parse.c
@@ -1564,7 +1564,7 @@ static int SigValidate(DetectEngineCtx *de_ctx, Signature *s)
         if (s->init_data->smlists[x]) {
             const DetectEngineAppInspectionEngine *app = de_ctx->app_inspect_engines;
             for ( ; app != NULL; app = app->next) {
-                if (app->sm_list == x && s->alproto == app->alproto) {
+                if (app->sm_list == x && ((s->alproto == app->alproto) || s->alproto == 0)) {
                     SCLogDebug("engine %s dir %d alproto %d",
                             DetectBufferTypeGetNameById(de_ctx, app->sm_list),
                             app->dir, app->alproto);