]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect-engine: use only the exact match fn
authorShivani Bhardwaj <shivani@oisf.net>
Wed, 1 Nov 2023 10:31:35 +0000 (16:01 +0530)
committerVictor Julien <victor@inliniac.net>
Tue, 5 Dec 2023 10:33:09 +0000 (11:33 +0100)
commit1f78a4fcd8cfd831b37916335af8a3f7518d3bff
treea9d2a0344d10df18454bbbaff9f8b662edb8cef8
parentd3ccff58228807998d7d6b73d0b2b78aa697a560
detect-engine: use only the exact match fn

DetectFlagsSignatureNeedsSynPackets checks if TCP SYN flag is set among
other flags.
DetectFlagsSignatureNeedsSynOnlyPackets checks if only TCP SYN flag is
set and no other flag.

Since DetectFlagsSignatureNeedsSynOnlyPackets also already checks for
TCP SYN flag, it does not need to be used in combination with
DetectFlagsSignatureNeedsSynPackets as this fn seems to be the superset
of the former.
src/detect-engine-build.c