From f6ba3699bb8a790956b645e3c47cc159811ab677 Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Fri, 24 Sep 2021 15:42:41 +0200 Subject: [PATCH] flowint: same analysis warnings as flowbits --- src/detect-engine-analyzer.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/detect-engine-analyzer.c b/src/detect-engine-analyzer.c index 9298ba33cf..bf6f3affd1 100644 --- a/src/detect-engine-analyzer.c +++ b/src/detect-engine-analyzer.c @@ -1470,7 +1470,7 @@ void EngineAnalysisRules(const DetectEngineCtx *de_ctx, } if (rule_flow == 0 && rule_flags == 0 && !(s->proto.flags & DETECT_PROTO_ANY) && DetectProtoContainsProto(&s->proto, IPPROTO_TCP) - && (rule_content || rule_content_http || rule_pcre || rule_pcre_http || rule_flowbits)) { + && (rule_content || rule_content_http || rule_pcre || rule_pcre_http || rule_flowbits || rule_flowint)) { rule_warning += 1; warn_tcp_no_flow = 1; } @@ -1537,7 +1537,7 @@ void EngineAnalysisRules(const DetectEngineCtx *de_ctx, if (rule_ipv6_only) fprintf(rule_engine_analysis_FD, " Rule is IPv6 only.\n"); if (rule_ipv4_only) fprintf(rule_engine_analysis_FD, " Rule is IPv4 only.\n"); if (packet_buf) fprintf(rule_engine_analysis_FD, " Rule matches on packets.\n"); - if (!rule_flow_nostream && stream_buf && (rule_flow || rule_flowbits || rule_content || rule_pcre)) { + if (!rule_flow_nostream && stream_buf && (rule_flow || rule_flowbits || rule_flowint || rule_content || rule_pcre)) { fprintf(rule_engine_analysis_FD, " Rule matches on reassembled stream.\n"); } for(size_t i = 0; i < ARRAY_SIZE(analyzer_items); i++) {