detect/threshold: set missing alert flag in rate_filter

ACTION_ALERT is supposed to be set now, but wasn't for rate_filter.
This becomes important in a follow up patch where only PacketAlert
entries with `action` `ACTION_ALERT` are logged in alert logging.
pull/14278/head
Victor Julien 9 months ago
parent bccdb445ff
commit 2a7eb5d062

@ -630,11 +630,11 @@ static inline void RateFilterSetAction(PacketAlert *pa, uint8_t new_action)
break;
case TH_ACTION_DROP:
pa->flags |= PACKET_ALERT_FLAG_RATE_FILTER_MODIFIED;
pa->action = ACTION_DROP;
pa->action = (ACTION_DROP | ACTION_ALERT);
break;
case TH_ACTION_REJECT:
pa->flags |= PACKET_ALERT_FLAG_RATE_FILTER_MODIFIED;
pa->action = (ACTION_REJECT | ACTION_DROP);
pa->action = (ACTION_REJECT | ACTION_DROP | ACTION_ALERT);
break;
case TH_ACTION_PASS:
pa->flags |= PACKET_ALERT_FLAG_RATE_FILTER_MODIFIED;

Loading…
Cancel
Save