From 8771a02989e024cd5d8a80d51289c7ffef1ce17c Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Wed, 1 Aug 2018 21:52:16 +0200 Subject: [PATCH] dcerpc: fix dce_iface not matching --- src/detect-dce-iface.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/detect-dce-iface.c b/src/detect-dce-iface.c index 472399e0f6..25cbc8da2e 100644 --- a/src/detect-dce-iface.c +++ b/src/detect-dce-iface.c @@ -310,7 +310,8 @@ static int DetectDceIfaceMatch(ThreadVars *t, DetectEngineThreadCtx *det_ctx, if (!dcerpc_state->dcerpc.dcerpcrequest.first_request_seen) goto end; - if (!(dcerpc_state->dcerpc.dcerpchdr.type == REQUEST)) + if (!(dcerpc_state->dcerpc.dcerpchdr.type == REQUEST || + dcerpc_state->dcerpc.dcerpchdr.type == RESPONSE)) goto end; TAILQ_FOREACH(item, &dcerpc_state->dcerpc.dcerpcbindbindack.accepted_uuid_list, next) { -- 2.47.2