From: Juweria Ali Imran (jaliimra) <jaliimra@cisco.com>
Date: Tue, 9 Sep 2025 15:12:50 +0000 (+0000)
Subject: Pull request #4885: stream_tcp: do not generate established event on RST if 3whs... 
X-Git-Tag: 3.9.6.0~23
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5b6d5f592a46918a284b8d21191654cf8271724c;p=thirdparty%2Fsnort3.git

Pull request #4885: stream_tcp: do not generate established event on RST if 3whs is not complete

Merge in SNORT/snort3 from ~JALIIMRA/snort3:conn_event_est to master

Squashed commit of the following:

commit 60c8aacab33e8ce080bfb2b509a928f0a7ab4dc3
Author: Juweria Ali Imran <jaliimra@cisco.com>
Date:   Wed Aug 27 09:05:32 2025 -0400

    stream_tcp: do not generate established event on RST if 3whs is not complete
---

diff --git a/src/stream/tcp/tcp_state_syn_recv.cc b/src/stream/tcp/tcp_state_syn_recv.cc
index 07ec00f85..bd1e1e48f 100644
--- a/src/stream/tcp/tcp_state_syn_recv.cc
+++ b/src/stream/tcp/tcp_state_syn_recv.cc
@@ -177,8 +177,6 @@ bool TcpStateSynRecv::rst_recv(TcpSegmentDescriptor& tsd, TcpStreamTracker& trk)
     {
         Flow* flow = tsd.get_flow();
         flow->set_session_flags(SSNFLAG_RESET);
-        if ( !((SSNFLAG_TCP_PSEUDO_EST | SSNFLAG_ESTABLISHED) & flow->get_session_flags()) )
-            trk.session->set_pseudo_established(tsd.get_pkt());
     }
     else
     {