]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
detect/analyzer: Improved fast pattern display
authorJeff Lucovsky <jeff@lucovsky.org>
Sun, 1 Dec 2019 18:15:34 +0000 (13:15 -0500)
committerVictor Julien <victor@inliniac.net>
Thu, 5 Dec 2019 12:36:48 +0000 (13:36 +0100)
When transforms are part of a rule, improve information displayed with
fast patterns to include the original buffer name and whether any
transform(s) are applied.

src/detect-engine-analyzer.c

index 5d598f2d27d99873a36d5b6e99ae28c11aa1b6e5..d8bcbd162caf040295d5c13196027dbf830b6754 100644 (file)
@@ -526,10 +526,18 @@ static void EngineAnalysisRulesPrintFP(const DetectEngineCtx *de_ctx, const Sign
         const char *name = DetectBufferTypeGetNameById(de_ctx, list_type);
         if (desc && name) {
             fprintf(rule_engine_analysis_FD, "%s (%s)", desc, name);
+        } else if (desc || name) {
+            fprintf(rule_engine_analysis_FD, "%s", desc ? desc : name);
         }
+
     }
 
-    fprintf(rule_engine_analysis_FD, "\" buffer.\n");
+    fprintf(rule_engine_analysis_FD, "\" ");
+    if (de_ctx->buffer_type_map[list_type] && de_ctx->buffer_type_map[list_type]->transforms.cnt) {
+        fprintf(rule_engine_analysis_FD, "(with %d transform(s)) ",
+                de_ctx->buffer_type_map[list_type]->transforms.cnt);
+    }
+    fprintf(rule_engine_analysis_FD, "buffer.\n");
 
     return;
 }