From 660e9e489b7d898509946d8a66f15c6107fd5a4e Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Wed, 17 Feb 2021 14:54:46 +0100 Subject: [PATCH] protodetect: only run ProbingParserTc if STREAM_TOCLIENT --- src/app-layer-detect-proto.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/app-layer-detect-proto.c b/src/app-layer-detect-proto.c index f659b9b97f..91080a15d4 100644 --- a/src/app-layer-detect-proto.c +++ b/src/app-layer-detect-proto.c @@ -477,7 +477,7 @@ static inline AppProto PPGetProto(const AppLayerProtoDetectProbingParserElement AppProto alproto = ALPROTO_UNKNOWN; if (flags & STREAM_TOSERVER && pe->ProbingParserTs != NULL) { alproto = pe->ProbingParserTs(f, flags, buf, buflen, rdir); - } else if (pe->ProbingParserTc != NULL) { + } else if (flags & STREAM_TOCLIENT && pe->ProbingParserTc != NULL) { alproto = pe->ProbingParserTc(f, flags, buf, buflen, rdir); } if (AppProtoIsValid(alproto)) { -- 2.47.2