From: Ludovico Cavedon <cavedon@lastline.com>
Date: Sat, 1 Dec 2012 23:29:06 +0000 (-0800)
Subject: Wait until both sides close the TCP connection before initiating cleanup
X-Git-Tag: suricata-1.4~16
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F233%2Fhead;p=thirdparty%2Fsuricata.git

Wait until both sides close the TCP connection before initiating cleanup
---

diff --git a/src/stream-tcp-reassemble.c b/src/stream-tcp-reassemble.c
index b188e496b5..fd0255d60e 100644
--- a/src/stream-tcp-reassemble.c
+++ b/src/stream-tcp-reassemble.c
@@ -2631,7 +2631,7 @@ static int StreamTcpReassembleAppLayer (ThreadVars *tv,
     {
         /* send an empty EOF msg if we have no segments but TCP state
          * is beyond ESTABLISHED */
-        if (ssn->state > TCP_ESTABLISHED) {
+        if (ssn->state >= TCP_CLOSING) {
             SCLogDebug("sending empty eof message");
             /* send EOF to app layer */
             STREAM_SET_FLAGS(ssn, stream, p, flags);