Project

General

Profile

Actions

Bug #1162

closed

proto-detect: make sure probing parsers for all registered ports are run

Added by Victor Julien almost 10 years ago. Updated almost 10 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

If we register protocols:

protoA:
  udp:
    detection-ports:
      dp: 53
protoB:
  udp:
    detection-ports:
      sp: 1234

We need to inspect both when our flow has ports 1234 > 53. Currently we would only inspect the parser registered at 53 (protoA), as we look up parser for f>dp first.

Actions

Also available in: Atom PDF