aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

flowint: same analysis warnings as flowbits

Browse Source
pull/6424/head
Philippe Antoine 4 years ago committed by Victor Julien
parent 1dc98cad27
commit f6ba3699bb
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File

4
src/detect-engine-analyzer.c
Unescape Escape View File

@ -1470,7 +1470,7 @@ void EngineAnalysisRules(const DetectEngineCtx *de_ctx,
} }
if (rule_flow == 0 && rule_flags == 0 if (rule_flow == 0 && rule_flags == 0
&& !(s->proto.flags & DETECT_PROTO_ANY) && DetectProtoContainsProto(&s->proto, IPPROTO_TCP) && !(s->proto.flags & DETECT_PROTO_ANY) && DetectProtoContainsProto(&s->proto, IPPROTO_TCP)
&& (rule_content || rule_content_http || rule_pcre || rule_pcre_http || rule_flowbits)) { && (rule_content || rule_content_http || rule_pcre || rule_pcre_http || rule_flowbits || rule_flowint)) {
rule_warning += 1; rule_warning += 1;
warn_tcp_no_flow = 1; warn_tcp_no_flow = 1;
} }
@ -1537,7 +1537,7 @@ void EngineAnalysisRules(const DetectEngineCtx *de_ctx,
if (rule_ipv6_only) fprintf(rule_engine_analysis_FD, " Rule is IPv6 only.\n"); if (rule_ipv6_only) fprintf(rule_engine_analysis_FD, " Rule is IPv6 only.\n");
if (rule_ipv4_only) fprintf(rule_engine_analysis_FD, " Rule is IPv4 only.\n"); if (rule_ipv4_only) fprintf(rule_engine_analysis_FD, " Rule is IPv4 only.\n");
if (packet_buf) fprintf(rule_engine_analysis_FD, " Rule matches on packets.\n"); if (packet_buf) fprintf(rule_engine_analysis_FD, " Rule matches on packets.\n");
if (!rule_flow_nostream && stream_buf && (rule_flow || rule_flowbits || rule_content || rule_pcre)) { if (!rule_flow_nostream && stream_buf && (rule_flow || rule_flowbits || rule_flowint || rule_content || rule_pcre)) {
fprintf(rule_engine_analysis_FD, " Rule matches on reassembled stream.\n"); fprintf(rule_engine_analysis_FD, " Rule matches on reassembled stream.\n");
} }
for(size_t i = 0; i < ARRAY_SIZE(analyzer_items); i++) { for(size_t i = 0; i < ARRAY_SIZE(analyzer_items); i++) {

Write Preview
Loading…
Cancel
Save