af-packet: only ref mpeer if needed in tpacket v2

[people/ms/suricata.git] / src / source-af-packet.c

diff --git a/src/source-af-packet.c b/src/source-af-packet.c
index eec02309bbff07a97c9aa55d01f9232cad4ba9b0..810c7cc0726d4714b7659a099c4baf91c2f563e9 100644 (file)
--- a/src/source-af-packet.c
+++ b/src/source-af-packet.c
@@ -779,8 +779,12 @@ static void AFPReadFromRingSetupPacket(
 
     p->ReleasePacket = AFPReleasePacket;
     p->afp_v.relptr = h.raw;
-    p->afp_v.mpeer = ptv->mpeer;
-    AFPRefSocket(ptv->mpeer);
+    if (ptv->flags & AFP_NEED_PEER) {
+        p->afp_v.mpeer = ptv->mpeer;
+        AFPRefSocket(ptv->mpeer);
+    } else {
+        p->afp_v.mpeer = NULL;
+    }
     p->afp_v.copy_mode = ptv->copy_mode;
     p->afp_v.peer = (p->afp_v.copy_mode == AFP_COPY_MODE_NONE) ? NULL : ptv->mpeer->peer;