Support for sigs with both pkt and applayer detect

Sets a flowbit with the sig id if the packet matches match. Checks
on that if the app layer matches match. Currently misuses the
flowbits api for this in a way that needs fixing.
remotes/origin/master-1.0.x
Victor Julien 17 years ago
parent 493715c0d2
commit 01976a0b74

@ -562,7 +562,7 @@ static int SigMatchSignaturesAppLayer(ThreadVars *th_v, DetectEngineCtx *de_ctx,
p->action = s->action;
}
} else {
PacketAlertAppend(p, 1, s->id, s->rev, s->prio, s->msg);
PacketAlertHandle(de_ctx,s,p);
/* set verdict on packet */
p->action = s->action;

Loading…
Cancel
Save