From: Victor Julien <vjulien@oisf.net>
Date: Wed, 13 Apr 2022 12:00:37 +0000 (+0200)
Subject: app-layer: disable stream app tracking on no parser
X-Git-Tag: suricata-7.0.0-beta1~742
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=205bc1e2884b28dc9b016f116f5c54e0d569eb5d;p=thirdparty%2Fsuricata.git

app-layer: disable stream app tracking on no parser

If protocol has no parser enabled or implemented, disable the app
progress tracking in the stream engine to reduce the workload in
the stream engine.
---

diff --git a/src/app-layer-parser.c b/src/app-layer-parser.c
index 97172b7046..43accd7217 100644
--- a/src/app-layer-parser.c
+++ b/src/app-layer-parser.c
@@ -1259,8 +1259,12 @@ int AppLayerParserParse(ThreadVars *tv, AppLayerParserThreadCtx *alp_tctx, Flow
     const uint8_t direction = (flags & STREAM_TOSERVER) ? 0 : 1;
 
     /* we don't have the parser registered for this protocol */
-    if (p->StateAlloc == NULL)
+    if (p->StateAlloc == NULL) {
+        if (f->proto == IPPROTO_TCP) {
+            StreamTcpDisableAppLayer(f);
+        }
         goto end;
+    }
 
     if (flags & STREAM_GAP) {
         if (!(p->option_flags & APP_LAYER_PARSER_OPT_ACCEPT_GAPS)) {