diff --git a/src/detect-engine-alert.c b/src/detect-engine-alert.c index 7d6c7c8332..f570fe94f9 100644 --- a/src/detect-engine-alert.c +++ b/src/detect-engine-alert.c @@ -275,7 +275,8 @@ void PacketAlertFinalize(DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx } } - if (s->flags & SIG_FLAG_IPONLY) { + /* IP-only and PD-only matches should apply to the flow */ + if (s->flags & (SIG_FLAG_IPONLY | SIG_FLAG_PDONLY)) { if (p->flow != NULL) { RuleActionToFlow(s->action, p->flow); }