]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
dcerpc: fix dce_iface not matching
authorVictor Julien <victor@inliniac.net>
Wed, 1 Aug 2018 19:52:16 +0000 (21:52 +0200)
committerVictor Julien <victor@inliniac.net>
Fri, 3 Aug 2018 14:04:45 +0000 (16:04 +0200)
src/detect-dce-iface.c

index 472399e0f6e2d7fe7dba35ed2742b880bb1a8484..25cbc8da2e2cc0338f92db2dd1fd5c8931fea6a1 100644 (file)
@@ -310,7 +310,8 @@ static int DetectDceIfaceMatch(ThreadVars *t, DetectEngineThreadCtx *det_ctx,
     if (!dcerpc_state->dcerpc.dcerpcrequest.first_request_seen)
         goto end;
 
-    if (!(dcerpc_state->dcerpc.dcerpchdr.type == REQUEST))
+    if (!(dcerpc_state->dcerpc.dcerpchdr.type == REQUEST ||
+          dcerpc_state->dcerpc.dcerpchdr.type == RESPONSE))
         goto end;
 
     TAILQ_FOREACH(item, &dcerpc_state->dcerpc.dcerpcbindbindack.accepted_uuid_list, next) {