From: Victor Julien Date: Fri, 26 Nov 2021 12:06:00 +0000 (+0100) Subject: stream/reassembly: ignore min_inspect_depth on TCP state CLOSED X-Git-Tag: suricata-7.0.0-beta1~1127 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6ee818cb3e41e54cae56535fda0fc19befbc71a1;p=thirdparty%2Fsuricata.git stream/reassembly: ignore min_inspect_depth on TCP state CLOSED --- diff --git a/src/stream-tcp-list.c b/src/stream-tcp-list.c index 47fde89cb5..5800251d17 100644 --- a/src/stream-tcp-list.c +++ b/src/stream-tcp-list.c @@ -710,7 +710,7 @@ static inline uint64_t GetLeftEdge(TcpSession *ssn, TcpStream *stream) /* apply min inspect depth: if it is set we need to keep data * before the raw progress. */ - if (use_app && stream->min_inspect_depth) { + if (use_app && stream->min_inspect_depth && ssn->state < TCP_CLOSED) { if (raw_progress < stream->min_inspect_depth) raw_progress = 0; else