From: Victor Julien <victor@inliniac.net>
Date: Thu, 13 Feb 2014 14:15:53 +0000 (+0100)
Subject: dns yaml: fix detect ports of tcp relying on udp
X-Git-Tag: suricata-2.0rc2~77
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=ec4288f7c2f7f73204b60d29b932dd5f2ef8b97b;p=thirdparty%2Fsuricata.git

dns yaml: fix detect ports of tcp relying on udp

The probing parser detection ports yaml settings of the TCP part
of the DNS parser accidentally used udp as protocol string, causing
the wrong part of the YAML to be evaluated.
---

diff --git a/src/app-layer-dns-tcp.c b/src/app-layer-dns-tcp.c
index aaf1ade2fa..52982bbbea 100644
--- a/src/app-layer-dns-tcp.c
+++ b/src/app-layer-dns-tcp.c
@@ -605,7 +605,7 @@ void RegisterDNSTCPParsers(void) {
                                           STREAM_TOSERVER,
                                           DNSTcpProbingParser);
         } else {
-            AppLayerProtoDetectPPParseConfPorts("udp", IPPROTO_TCP,
+            AppLayerProtoDetectPPParseConfPorts("tcp", IPPROTO_TCP,
                                                 proto_name, ALPROTO_DNS,
                                                 0, sizeof(DNSTcpHeader),
                                                 DNSTcpProbingParser);