]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
app-layer-ssh: trigger bypass when done
authorEric Leblond <eric@regit.org>
Thu, 20 Jul 2017 08:19:01 +0000 (10:19 +0200)
committerVictor Julien <victor@inliniac.net>
Tue, 25 Jul 2017 11:28:06 +0000 (13:28 +0200)
Trigger bypass when application layer will not inspect anymore.

src/app-layer-ssh.c

index 76297769038dbcbfe2c8d226faad68fe742f35d3..91aa9c59b657ff2f264820c3a48e48caea9bd85f 100644 (file)
@@ -434,6 +434,7 @@ static int SSHParseRequest(Flow *f, void *state, AppLayerParserState *pstate,
         ssh_state->srv_hdr.flags & SSH_FLAG_PARSER_DONE) {
         AppLayerParserStateSetFlag(pstate, APP_LAYER_PARSER_NO_INSPECTION);
         AppLayerParserStateSetFlag(pstate, APP_LAYER_PARSER_NO_REASSEMBLY);
+        AppLayerParserStateSetFlag(pstate, APP_LAYER_PARSER_BYPASS_READY);
     }
 
     SCReturnInt(r);
@@ -458,6 +459,7 @@ static int SSHParseResponse(Flow *f, void *state, AppLayerParserState *pstate,
         ssh_state->srv_hdr.flags & SSH_FLAG_PARSER_DONE) {
         AppLayerParserStateSetFlag(pstate, APP_LAYER_PARSER_NO_INSPECTION);
         AppLayerParserStateSetFlag(pstate, APP_LAYER_PARSER_NO_REASSEMBLY);
+        AppLayerParserStateSetFlag(pstate, APP_LAYER_PARSER_BYPASS_READY);
     }
 
     SCReturnInt(r);