detect/engine: use alert queue from det_ctx

Task #4943
pull/7349/head
Juliana Fajardini 3 years ago committed by Victor Julien
parent 88805f03ee
commit aa547a8de3

@ -1133,7 +1133,7 @@ void IPOnlyMatchPacket(ThreadVars *tv,
}
}
}
PacketAlertAppend(det_ctx, s, p, 0, 0);
AlertQueueAppend(det_ctx, s, p, 0, 0);
}
}
}

@ -804,7 +804,7 @@ static inline void DetectRulePacketRules(
#endif
DetectRunPostMatch(tv, det_ctx, p, s);
PacketAlertAppend(det_ctx, s, p, 0, alert_flags);
AlertQueueAppend(det_ctx, s, p, 0, alert_flags);
next:
DetectVarProcessList(det_ctx, pflow, p);
DetectReplaceFree(det_ctx);
@ -1491,7 +1491,7 @@ static void DetectRunTx(ThreadVars *tv,
const uint8_t alert_flags = (PACKET_ALERT_FLAG_STATE_MATCH | PACKET_ALERT_FLAG_TX);
SCLogDebug("%p/%"PRIu64" sig %u (%u) matched", tx.tx_ptr, tx.tx_id, s->id, s->num);
PacketAlertAppend(det_ctx, s, p, tx.tx_id, alert_flags);
AlertQueueAppend(det_ctx, s, p, tx.tx_id, alert_flags);
}
DetectVarProcessList(det_ctx, p->flow, p);
RULE_PROFILING_END(det_ctx, s, r, p);
@ -1637,7 +1637,8 @@ static void DetectRunFrames(ThreadVars *tv, DetectEngineCtx *de_ctx, DetectEngin
det_ctx->frame_id = frame->id;
SCLogDebug(
"%p/%" PRIi64 " sig %u (%u) matched", frame, frame->id, s->id, s->num);
PacketAlertAppend(det_ctx, s, p, 0, alert_flags); // TODO tx id frame field
// TODO tx id frame field
AlertQueueAppend(det_ctx, s, p, 0, alert_flags);
}
}
DetectVarProcessList(det_ctx, p->flow, p);

Loading…
Cancel
Save