From efcc7f9dfcada96d319b08213847c6baff8c2563 Mon Sep 17 00:00:00 2001
From: Philippe Antoine <pantoine@oisf.net>
Date: Mon, 29 Dec 2025 22:53:30 +0100
Subject: [PATCH] ftp: remove PASS pattern for protocol detection

As FTP must have USER before PASS command
unlike IRC which can begin by PASS command

Ticket: 2978
---
 src/app-layer-ftp.c | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/src/app-layer-ftp.c b/src/app-layer-ftp.c
index 36ed4f211c..67e3a49702 100644
--- a/src/app-layer-ftp.c
+++ b/src/app-layer-ftp.c
@@ -966,10 +966,6 @@ static int FTPRegisterPatternsForProtocolDetection(void)
         return -1;
     }
 
-    if (SCAppLayerProtoDetectPMRegisterPatternCI(
-                IPPROTO_TCP, ALPROTO_FTP, "PASS ", 5, 0, STREAM_TOSERVER) < 0) {
-        return -1;
-    }
     if (SCAppLayerProtoDetectPMRegisterPatternCI(
                 IPPROTO_TCP, ALPROTO_FTP, "PORT ", 5, 0, STREAM_TOSERVER) < 0) {
         return -1;