]> git.ipfire.org Git - thirdparty/suricata.git/commit
app-layer: lower limit for protocol detection on protocol change
authorPhilippe Antoine <contact@catenacyber.fr>
Tue, 6 Oct 2020 13:22:59 +0000 (15:22 +0200)
committerVictor Julien <victor@inliniac.net>
Mon, 16 Nov 2020 13:23:59 +0000 (14:23 +0100)
commit6b50a71d1a118aff4fc1d745d931dfce0bc3162c
tree0f52ce012398eb5ffc09060f00b857508af7b942
parenta18a9d3046260f520e7659e183fe02839285b773
app-layer: lower limit for protocol detection on protocol change

So that protocol detection does not run for too long because
TCPProtoDetectCheckBailConditions somehow relies on its TCP stream
to start from zero, which is not the case on protocol change

Adds also debug validation checks, such as
both sides are known on protocol change

And only sets once alproto_orig
src/app-layer-detect-proto.c
src/app-layer.c