]> git.ipfire.org Git - thirdparty/suricata.git/commit
projects / thirdparty / suricata.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1f31eb9) | patch
stream/midstream: fix double flow reverse case
authorVictor Julien <vjulien@oisf.net>
Wed, 8 Jun 2022 11:11:55 +0000 (13:11 +0200)
committerVictor Julien <vjulien@oisf.net>
Mon, 13 Jun 2022 18:49:33 +0000 (20:49 +0200)
commit643d502d9ee88fab308ae50b81d25ff2621f7871
treeaf21f62898d342aa4c1effa201b22f552bac9d26tree | snapshot
parent1f31eb9e58e351297207c3bee6d12ac06f557a67commit | diff
stream/midstream: fix double flow reverse case

In the case of midstream SYN/ACK pickup, we reverse the flow based on
the SYN/ACK. If we then later get traffic that appears to be in the
reverse direction based on the app-layer, we would reverse it again.
This isn't correct. When we have the SYN/ACK we know the flow's real
direction.

(cherry picked from commit fea374626ac9d0dfe69df24958596867f9e42734)
src/app-layer.c diff | blob | blame | history
Mirror of https://github.com/OISF/suricata.git