IPBasedAnalyzer: Don't flip connections when destination is broadcast

Closes #3235
This commit is contained in:
Arne Welzel 2023-08-17 13:03:08 +02:00
parent de65671a0a
commit ba04f4c31d
5 changed files with 17 additions and 1 deletions

View file

@ -171,7 +171,7 @@ zeek::Connection* IPBasedAnalyzer::NewConn(const ConnTuple* id, const detail::Co
pkt->ip_hdr->FlowLabel(), pkt);
conn->SetTransport(transport);
if ( flip )
if ( flip && ! id->dst_addr.IsBroadcast() )
conn->FlipRoles();
BuildSessionAnalyzerTree(conn);