Don't set tag on pseudo packets

12 years ago · d12761233c
parent 02cbbd0b89
commit d12761233c
1 changed files with 2 additions and 1 deletions
--- a/src/detect-engine-alert.c
+++ b/src/detect-engine-alert.c
@ -282,7 +282,8 @@ void PacketAlertFinalize(DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx

    /* At this point, we should have all the new alerts. Now check the tag
     * keyword context for sessions and hosts */
-    TagHandlePacket(de_ctx, det_ctx, p);
+    if (!(p->flags & PKT_PSEUDO_STREAM_END))
+        TagHandlePacket(de_ctx, det_ctx, p);
 }