From: Victor Julien <victor@inliniac.net>
Date: Wed, 1 Aug 2018 19:52:16 +0000 (+0200)
Subject: dcerpc: fix dce_iface not matching
X-Git-Tag: suricata-4.1.0-rc2~173
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=c4b56ca28917eb460ea9eb223b9bc98fbb9ee1d8;p=thirdparty%2Fsuricata.git

dcerpc: fix dce_iface not matching
---

diff --git a/src/detect-dce-iface.c b/src/detect-dce-iface.c
index ccdd255302..7715239b89 100644
--- a/src/detect-dce-iface.c
+++ b/src/detect-dce-iface.c
@@ -329,7 +329,8 @@ static int DetectDceIfaceMatch(ThreadVars *t, DetectEngineThreadCtx *det_ctx,
     if (!dcerpc_state->dcerpc.dcerpcrequest.first_request_seen)
         goto end;
 
-    if (!(dcerpc_state->dcerpc.dcerpchdr.type == REQUEST))
+    if (!(dcerpc_state->dcerpc.dcerpchdr.type == REQUEST ||
+          dcerpc_state->dcerpc.dcerpchdr.type == RESPONSE))
         goto end;
 
     TAILQ_FOREACH(item, &dcerpc_state->dcerpc.dcerpcbindbindack.accepted_uuid_list, next) {