]> git.ipfire.org Git - thirdparty/suricata.git/commit
rust/dns/tcp - probe even if payload is short 2838/head
authorJason Ish <ish@unx.ca>
Thu, 13 Jul 2017 16:28:48 +0000 (10:28 -0600)
committerVictor Julien <victor@inliniac.net>
Fri, 14 Jul 2017 09:57:34 +0000 (11:57 +0200)
commit3063851d85528c05991cfa6678a39079a24e56ea
treebf88eebde2d43f662b320f6aece008a2c0c00345
parent74f4f6dd633e53e7507399b715d07c264d96261f
rust/dns/tcp - probe even if payload is short

As the DNS probe just uses the query portion of a response, don't
require there to be as many bytes as specified in the TCP DNS
header. This can occur in large responses where probe is called
without all the data.

Fixes the cases where the app proto is recorded as failed.

Fixes issue:
https://redmine.openinfosecfoundation.org/issues/2169
rust/src/dns/dns.rs