]> git.ipfire.org Git - thirdparty/suricata.git/commit
stream: improve StreamTcpSegmentForEach for IPS 1846/head
authorVictor Julien <victor@inliniac.net>
Wed, 3 Feb 2016 08:51:33 +0000 (09:51 +0100)
committerVictor Julien <victor@inliniac.net>
Tue, 9 Feb 2016 13:57:51 +0000 (14:57 +0100)
commitb93a302a5b3d011bc43118cce5037e89becab2f2
tree2983aff91cc36dca02a198c2acf2dde43e7df4de
parent3a9bcd6a5362346b0e5c55fb4a2eb4117d818af4
stream: improve StreamTcpSegmentForEach for IPS

StreamTcpSegmentForEach would only return ACK'd segments. This lead
to missing stream data in alerts when running in IPS mode.

This patch changes the behavior for IPS. All segments are iterated
now, also the non-ACK'd ones. For IDS mode the behavior is unchanged.
src/stream-tcp.c