detect: update/document drop flow logic

Now that flow drop is applied to packets before other processing,
no drop has to be issued on a packet.

(cherry picked from commit 85ddba63f64e95f4c202f8ef05e8886a0cbac725)

diff --git a/src/detect.c b/src/detect.c
index 800c81927b3411643aa6f9cc8944540b4098b89d..724679e9fa0e0782470a2e1c192f25fc00d3f55c 100644 (file)
--- a/src/detect.c
+++ b/src/detect.c
@@ -1568,7 +1568,6 @@ static void DetectFlow(ThreadVars *tv,
 
     /* if flow is set to drop, we enforce that here */
     if (p->flow->flags & FLOW_ACTION_DROP) {
-        PacketDrop(p, ACTION_DROP, PKT_DROP_REASON_FLOW_DROP);
         SCReturn;
     }