Actually, the tcp-request and tcp-response custom ation are always final
actions. This patch create a new type of action that can permit to
continue the evaluation of tcp-request and tcp-response processing.
TCP_ACT_CLOSE, /* close at the sender's */
TCP_ACT_CAPTURE, /* capture a fetched sample */
TCP_ACT_CUSTOM, /* Use for custom registered keywords. */
+ TCP_ACT_CUSTOM_CONT, /* Use for custom registered keywords. */
};
struct capture_prm {
goto missing_data;
}
- /* otherwise accept */
- break;
+ /* accept */
+ if (rule->action == TCP_ACT_CUSTOM)
+ break;
+ /* otherwise continue */
}
}
}
return 0;
}
- /* otherwise accept */
- break;
+ /* accept */
+ if (rule->action == TCP_ACT_CUSTOM)
+ break;
+ /* otherwise continue */
}
}
}