]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
rust/nfs: improve proto detect 2831/head
authorVictor Julien <victor@inliniac.net>
Mon, 10 Jul 2017 09:51:43 +0000 (11:51 +0200)
committerVictor Julien <victor@inliniac.net>
Tue, 11 Jul 2017 12:28:39 +0000 (14:28 +0200)
rust/src/nfs/nfs.rs

index 7e4197ee12a165b494e0a1d61ba4817915a55a40..2489ce8cd57349b9bc57ed6d81f25f56c5b8ae23 100644 (file)
@@ -1930,7 +1930,10 @@ pub fn nfs3_probe(i: &[u8], direction: u8) -> i8 {
     } else {
         match parse_rpc(i) {
             IResult::Done(_, ref rpc) => {
-                if rpc.hdr.frag_len >= 40 && rpc.hdr.frag_len <= 35000 && rpc.hdr.msgtype == 0 && rpc.progver == 3 && rpc.program == 100003 {
+                if rpc.hdr.frag_len >= 40 && rpc.hdr.msgtype == 0 &&
+                   rpc.rpcver == 2 && rpc.progver == 3 && rpc.program == 100003 &&
+                   rpc.procedure <= NFSPROC3_COMMIT
+                {
                     return 1;
                 } else {
                     return -1;