Added by Victor Julien over 12 years ago. Updated over 12 years ago.
Description
If we register protocols:
protoA: udp: detection-ports: dp: 53 protoB: udp: detection-ports: sp: 1234
We need to inspect both when our flow has ports 1234 > 53. Currently we would only inspect the parser registered at 53 (protoA), as we look up parser for f>dp first.
https://github.com/inliniac/suricata/pull/941
Also available in: PDF Atom