]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
app-layer: improve no payload inspect flag
authorVictor Julien <victor@inliniac.net>
Wed, 23 Apr 2014 15:55:24 +0000 (17:55 +0200)
committerVictor Julien <victor@inliniac.net>
Fri, 2 May 2014 09:55:12 +0000 (11:55 +0200)
If setting APP_LAYER_PARSER_NO_INSPECTION_PAYLOAD, trigger raw
reassembly.

src/app-layer-parser.c

index d36de193c7677b2e2158cfb732e47b19d1dbcb5b..24c22d9a75545332ffd0def45418535c95dab1e2 100644 (file)
@@ -852,6 +852,7 @@ int AppLayerParserParse(AppLayerParserThreadCtx *alp_tctx, Flow *f, AppProto alp
     /* In cases like HeartBleed for TLS we need to inspect AppLayer but not Payload */
     if (pstate->flags & APP_LAYER_PARSER_NO_INSPECTION_PAYLOAD) {
         FlowSetNoPayloadInspectionFlag(f);
+        AppLayerParserTriggerRawStreamReassembly(f);
     }
 
     /* next, see if we can get rid of transactions now */