smtp: recognize if client initiated TLS

Ticket: 7469
OISF · Jan 16, 2025 · 389eb49 · 389eb49
1 parent 1909525
commit 389eb49
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/app-layer-smtp.c b/src/app-layer-smtp.c
@@ -1699,7 +1699,7 @@ static AppProto SMTPServerProbingParser(
         return ALPROTO_UNKNOWN;
     }
     AppProto r = ALPROTO_UNKNOWN;
-    if (f->todstbytecnt > 4 && f->alproto_ts == ALPROTO_UNKNOWN) {
+    if (f->todstbytecnt > 4 && (f->alproto_ts == ALPROTO_UNKNOWN || f->alproto_ts == ALPROTO_TLS)) {
         // Only validates SMTP if client side is unknown
         // despite having received bytes.
         r = ALPROTO_SMTP;