From ff8dae3b751029a03f6c2f4f09f036969aa9d4d9 Mon Sep 17 00:00:00 2001 From: Eric Leblond Date: Fri, 19 Dec 2014 15:06:30 +0100 Subject: [PATCH] app-layer: fix 'detection-only' keyword If we follow the description in the yaml file, we should disable parsing if 'detection-only' keyword is used. --- src/app-layer-parser.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/app-layer-parser.c b/src/app-layer-parser.c index ec45b0caf8..c32f721c12 100644 --- a/src/app-layer-parser.c +++ b/src/app-layer-parser.c @@ -280,7 +280,7 @@ int AppLayerParserConfParserEnabled(const char *ipproto, } else if (strcasecmp(node->val, "no") == 0) { goto disabled; } else if (strcasecmp(node->val, "detection-only") == 0) { - goto enabled; + goto disabled; } else { SCLogError(SC_ERR_FATAL, "Invalid value found for %s.", param); exit(EXIT_FAILURE);