Merge pull request #2304 in SNORT/snort3 from ~ABHPAL/snort3:bugfix/CSCvu12864 to...

Squashed commit of the following:

commit 43bb164724cbf6d8b9774e14a5455a7126ce90ed
Author: Abhijit Pal <abhpal@cisco.com>
Date:   Tue Jun 30 07:47:16 2020 -0400

    Wizard: Adding FTP pattern to recognize FileZilla FTP Server so that FTP server inspector is attached to the flow (CSCvu12864)

diff --git a/lua/snort_defaults.lua b/lua/snort_defaults.lua
index 9aa365bc8b50889aaa24b6a05a02be8d8f9cb5c6..c05a47e833d3280bc7b93e5b78656563e2a72f98 100644 (file)
--- a/lua/snort_defaults.lua
+++ b/lua/snort_defaults.lua
@@ -329,7 +329,7 @@ default_wizard =
     spells =
     {
         { service = 'ftp', proto = 'tcp', client_first = false,
-          to_client = { '220*FTP' } },
+          to_client = { '220*FTP', '220*FileZilla' } },
 
         { service = 'http', proto = 'tcp', client_first = true,
           to_server = http_methods, to_client = { 'HTTP/' } },