ftp: remove PASS pattern for protocol detection

As FTP must have USER before PASS command
unlike IRC which can begin by PASS command

Ticket: 2978
pull/15112/head
Philippe Antoine 4 months ago committed by Victor Julien
parent dce2deee5e
commit efcc7f9dfc

@ -966,10 +966,6 @@ static int FTPRegisterPatternsForProtocolDetection(void)
return -1;
}
if (SCAppLayerProtoDetectPMRegisterPatternCI(
IPPROTO_TCP, ALPROTO_FTP, "PASS ", 5, 0, STREAM_TOSERVER) < 0) {
return -1;
}
if (SCAppLayerProtoDetectPMRegisterPatternCI(
IPPROTO_TCP, ALPROTO_FTP, "PORT ", 5, 0, STREAM_TOSERVER) < 0) {
return -1;

Loading…
Cancel
Save