]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
files: only prune in own direction
authorVictor Julien <victor@inliniac.net>
Tue, 14 Aug 2018 07:21:04 +0000 (09:21 +0200)
committerVictor Julien <victor@inliniac.net>
Tue, 14 Aug 2018 07:21:09 +0000 (09:21 +0200)
Only prune files in own direction. The opposite direction may still
require inspection.

src/output-file.c

index b47e76aea3b70a7e5a4793d84604a0650e5481f5..fdded0572e9d5387012ce7113c3a43f951718e3d 100644 (file)
@@ -144,8 +144,6 @@ static void OutputFileLogFfc(ThreadVars *tv,
                 }
             }
         }
-
-        FilePrune(ffc);
     }
 }
 
@@ -180,6 +178,11 @@ static TmEcode OutputFileLog(ThreadVars *tv, Packet *p, void *thread_data)
     OutputFileLogFfc(tv, op_thread_data, p, ffc_ts, file_close_ts, file_trunc, STREAM_TOSERVER);
     OutputFileLogFfc(tv, op_thread_data, p, ffc_tc, file_close_tc, file_trunc, STREAM_TOCLIENT);
 
+    if (ffc_ts && (p->flowflags & FLOW_PKT_TOSERVER))
+        FilePrune(ffc_ts);
+    if (ffc_tc && (p->flowflags & FLOW_PKT_TOCLIENT))
+        FilePrune(ffc_tc);
+
     return TM_ECODE_OK;
 }