From c4b56ca28917eb460ea9eb223b9bc98fbb9ee1d8 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Wed, 1 Aug 2018 21:52:16 +0200 Subject: [PATCH] dcerpc: fix dce_iface not matching --- src/detect-dce-iface.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/detect-dce-iface.c b/src/detect-dce-iface.c index ccdd255302..7715239b89 100644 --- a/src/detect-dce-iface.c +++ b/src/detect-dce-iface.c @@ -329,7 +329,8 @@ static int DetectDceIfaceMatch(ThreadVars *t, DetectEngineThreadCtx *det_ctx, if (!dcerpc_state->dcerpc.dcerpcrequest.first_request_seen) goto end; - if (!(dcerpc_state->dcerpc.dcerpchdr.type == REQUEST)) + if (!(dcerpc_state->dcerpc.dcerpchdr.type == REQUEST || + dcerpc_state->dcerpc.dcerpchdr.type == RESPONSE)) goto end; TAILQ_FOREACH(item, &dcerpc_state->dcerpc.dcerpcbindbindack.accepted_uuid_list, next) { -- 2.47.2