Don't let geoip match on pseudo packets.

12 years ago · 3304c91c91
parent 1fb4aae993
commit 3304c91c91
1 changed files with 3 additions and 0 deletions
--- a/src/detect-geoip.c
+++ b/src/detect-geoip.c
@ -169,6 +169,9 @@ static int DetectGeoipMatch(ThreadVars *t, DetectEngineThreadCtx *det_ctx,
    DetectGeoipData *geoipdata = (DetectGeoipData *)m->ctx;
    int matches = 0;

+    if (PKT_IS_PSEUDOPKT(p))
+        return 0;
+
    if (PKT_IS_IPV4(p))
    {
        if (geoipdata->flags & ( GEOIP_MATCH_SRC_FLAG | GEOIP_MATCH_BOTH_FLAG ))