pd: don't reverse flow if TCP session not midstream

diff --git a/src/app-layer.c b/src/app-layer.c
index 1fe34e5bfa6aa4580661684e973276c77a0d04bc..ebd91158e840235d41370cadefb531102193bc8b 100644 (file)
--- a/src/app-layer.c
+++ b/src/app-layer.c
@@ -358,7 +358,7 @@ static int TCPProtoDetect(ThreadVars *tv,
         /* if protocol detection indicated that we need to reverse
          * the direction of the flow, do it now. We flip the flow,
          * packet and the direction flags */
-        if (reverse_flow) {
+        if (reverse_flow && (ssn->flags & STREAMTCP_FLAG_MIDSTREAM)) {
             SCLogDebug("reversing flow after proto detect told us so");
             PacketSwap(p);
             FlowSwap(f);