dcerpc: fix dce_iface not matching

7 years ago · c4b56ca289
parent a2b8ea57fc
commit c4b56ca289
1 changed files with 2 additions and 1 deletions
--- a/src/detect-dce-iface.c
+++ b/src/detect-dce-iface.c
@ -329,7 +329,8 @@ static int DetectDceIfaceMatch(ThreadVars *t, DetectEngineThreadCtx *det_ctx,
    if (!dcerpc_state->dcerpc.dcerpcrequest.first_request_seen)
        goto end;

-    if (!(dcerpc_state->dcerpc.dcerpchdr.type == REQUEST))
+    if (!(dcerpc_state->dcerpc.dcerpchdr.type == REQUEST ||
+          dcerpc_state->dcerpc.dcerpchdr.type == RESPONSE))
        goto end;

    TAILQ_FOREACH(item, &dcerpc_state->dcerpc.dcerpcbindbindack.accepted_uuid_list, next) {