detect/flowint: only check if packet has flow

Fixed bug #2288.
pull/3032/head
Victor Julien 7 years ago
parent db24fee16e
commit 40a819d5a6

@ -2071,6 +2071,12 @@ static int SignatureCreateMask(Signature *s)
"flowbit(s)");
break;
}
case DETECT_FLOWINT:
/* flow is required for any flowint manipulation */
s->mask |= SIG_MASK_REQUIRE_FLOW;
SCLogDebug("sig requires flow to be able to manipulate "
"flowint(s)");
break;
case DETECT_FLAGS:
{
DetectFlagsData *fl = (DetectFlagsData *)sm->ctx;

Loading…
Cancel
Save