From: Victor Julien <victor@inliniac.net>
Date: Wed, 1 Aug 2018 19:52:16 +0000 (+0200)
Subject: dcerpc: fix dce_iface not matching
X-Git-Tag: suricata-4.0.6~58
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8771a02989e024cd5d8a80d51289c7ffef1ce17c;p=thirdparty%2Fsuricata.git

dcerpc: fix dce_iface not matching
---

diff --git a/src/detect-dce-iface.c b/src/detect-dce-iface.c
index 472399e0f6..25cbc8da2e 100644
--- a/src/detect-dce-iface.c
+++ b/src/detect-dce-iface.c
@@ -310,7 +310,8 @@ static int DetectDceIfaceMatch(ThreadVars *t, DetectEngineThreadCtx *det_ctx,
     if (!dcerpc_state->dcerpc.dcerpcrequest.first_request_seen)
         goto end;
 
-    if (!(dcerpc_state->dcerpc.dcerpchdr.type == REQUEST))
+    if (!(dcerpc_state->dcerpc.dcerpchdr.type == REQUEST ||
+          dcerpc_state->dcerpc.dcerpchdr.type == RESPONSE))
         goto end;
 
     TAILQ_FOREACH(item, &dcerpc_state->dcerpc.dcerpcbindbindack.accepted_uuid_list, next) {