TCP reset Optimization for REJECT_DIR_DST

Developers
1

For module RespondReject, TCP reset can do a better way for REJECT_DIR_DST, as you annotates。

//befor my modification
static inline void SetupTCP(Packet *p, Libnet11Packet *lpacket, enum RejectDirection dir)
{
switch (dir) {
…
case REJECT_DIR_DST:
default:
SCLogDebug(“sending a tcp reset to dst”);
lpacket->seq = TCP_GET_RAW_SEQ(tcph);
lpacket->ack = TCP_GET_RAW_ACK(tcph);

        lpacket->sp = p->sp;
        lpacket->dp = p->dp;
        break;
}
lpacket->window = TCP_GET_RAW_WINDOW(tcph);
//lpacket.seq += lpacket.dsize;

}

//after my modification
static inline void SetupTCP(Packet *p, Libnet11Packet *lpacket, enum RejectDirection dir)
{
switch (dir) {
…
case REJECT_DIR_DST:
default:
SCLogDebug(“sending a tcp reset to dst”);
lpacket->seq = TCP_GET_RAW_SEQ(tcph);
lpacket->seq += p->payload_len;
lpacket->ack = TCP_GET_RAW_ACK(tcph);

        lpacket->sp = p->sp;
        lpacket->dp = p->dp;
        break;
}
lpacket->window = TCP_GET_RAW_WINDOW(tcph);
//lpacket.seq += lpacket.dsize;

}