FragOffset Rule Keyword

remotes/origin/master-1.0.x
Breno Silva 16 years ago committed by Victor Julien
parent 7e299834d2
commit a857fa7170

@ -66,9 +66,8 @@ error:
* \param p pointer to the current packet * \param p pointer to the current packet
* \param m pointer to the sigmatch that we will cast into DetectFragOffsetData * \param m pointer to the sigmatch that we will cast into DetectFragOffsetData
* *
* \retval 0 no match * \retval 0 no match or frag is not set
* \retval 1 match * \retval 1 match
* \retval -1 No frag offset is set
* *
*/ */
int DetectFragOffsetMatch (ThreadVars *t, DetectEngineThreadCtx *det_ctx, Packet *p, Signature *s, SigMatch *m) { int DetectFragOffsetMatch (ThreadVars *t, DetectEngineThreadCtx *det_ctx, Packet *p, Signature *s, SigMatch *m) {
@ -81,11 +80,11 @@ int DetectFragOffsetMatch (ThreadVars *t, DetectEngineThreadCtx *det_ctx, Packet
if(IPV6_EXTHDR_FH(p)) { if(IPV6_EXTHDR_FH(p)) {
frag = IPV6_EXTHDR_GET_FH_OFFSET(p); frag = IPV6_EXTHDR_GET_FH_OFFSET(p);
} else { } else {
return -1; return 0;
} }
} else { } else {
SCLogDebug("No IPv4 or IPv6 packet"); SCLogDebug("No IPv4 or IPv6 packet");
return -1; return 0;
} }
switch (fragoff->mode) { switch (fragoff->mode) {

Loading…
Cancel
Save