mirror of https://github.com/OISF/suricata
stream/midstream: fix double flow reverse case
In the case of midstream SYN/ACK pickup, we reverse the flow based on the SYN/ACK. If we then later get traffic that appears to be in the reverse direction based on the app-layer, we would reverse it again. This isn't correct. When we have the SYN/ACK we know the flow's real direction.pull/7511/head
parent
2a7349406c
commit
fea374626a
Loading…
Reference in New Issue