detect/alert: apply pd only actions to flow

Ticket #4394
pull/5976/head
Victor Julien 4 years ago
parent 6c594d29db
commit 6cf44fc839

@ -275,7 +275,8 @@ void PacketAlertFinalize(DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx
}
}
if (s->flags & SIG_FLAG_IPONLY) {
/* IP-only and PD-only matches should apply to the flow */
if (s->flags & (SIG_FLAG_IPONLY | SIG_FLAG_PDONLY)) {
if (p->flow != NULL) {
RuleActionToFlow(s->action, p->flow);
}

Loading…
Cancel
Save