[Oisf-devel] small modification request on app-layer-detect-proto to suricata

rmkml rmkml at free.fr
Wed May 5 10:05:48 UTC 2010


Hi,
On app-layer-detect-proto.c file, you have declared:
  ... IPPROTO_TCP, ALPROTO_SMB2, "|fe|SMB"...
but why you have declared another ALPROTO_SMB2 on hexa? like this:
  ... IPPROTO_TCP, ALPROTO_SMB2, "|fe 53 4d 42|"...
Please change |53 4d 42| to SMB (more easy to read) {not missing |fe| starting}.
Regards
Rmkml



More information about the Oisf-devel mailing list