From 618ad0d92fccb2a4bd6489e76b695d661da82dd1 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Thu, 5 Dec 2019 15:31:28 +0100 Subject: [PATCH] app-layer: optimize inspection id tracking Increase the inspect id for a completely inspected tx in any case. This avoids re-evaluating transactions. Reported-by: Ilya Bakhtin --- src/app-layer-parser.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/app-layer-parser.c b/src/app-layer-parser.c index b7de5c0f40..660289e66d 100644 --- a/src/app-layer-parser.c +++ b/src/app-layer-parser.c @@ -795,9 +795,9 @@ void AppLayerParserSetTransactionInspectId(const Flow *f, AppLayerParserState *p tx, idx, flags & STREAM_TOSERVER ? "toserver" : "toclient", detect_flags); } } + idx++; if (!ires.has_next) break; - idx++; } pstate->inspect_id[direction] = idx; SCLogDebug("inspect_id now %"PRIu64, pstate->inspect_id[direction]);