]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
flowint: same analysis warnings as flowbits
authorPhilippe Antoine <contact@catenacyber.fr>
Fri, 24 Sep 2021 13:42:41 +0000 (15:42 +0200)
committerVictor Julien <victor@inliniac.net>
Sat, 16 Oct 2021 14:30:54 +0000 (16:30 +0200)
(cherry picked from commit f6ba3699bb8a790956b645e3c47cc159811ab677)

src/detect-engine-analyzer.c

index 7ed7dae6d64e3a1ccb7df621c91f3f797a0aa40c..81c23c3849b535e79149527150bba3804f583dd3 100644 (file)
@@ -1154,7 +1154,7 @@ void EngineAnalysisRules(const DetectEngineCtx *de_ctx,
     }
     if (rule_flow == 0 && rule_flags == 0
         && !(s->proto.flags & DETECT_PROTO_ANY) && DetectProtoContainsProto(&s->proto, IPPROTO_TCP)
-        && (rule_content || rule_content_http || rule_pcre || rule_pcre_http || rule_flowbits)) {
+        && (rule_content || rule_content_http || rule_pcre || rule_pcre_http || rule_flowbits || rule_flowint)) {
         rule_warning += 1;
         warn_tcp_no_flow = 1;
     }
@@ -1221,7 +1221,7 @@ void EngineAnalysisRules(const DetectEngineCtx *de_ctx,
         if (rule_ipv6_only) fprintf(rule_engine_analysis_FD, "    Rule is IPv6 only.\n");
         if (rule_ipv4_only) fprintf(rule_engine_analysis_FD, "    Rule is IPv4 only.\n");
         if (packet_buf) fprintf(rule_engine_analysis_FD, "    Rule matches on packets.\n");
-        if (!rule_flow_nostream && stream_buf && (rule_flow || rule_flowbits || rule_content || rule_pcre)) {
+        if (!rule_flow_nostream && stream_buf && (rule_flow || rule_flowbits || rule_flowint || rule_content || rule_pcre)) {
             fprintf(rule_engine_analysis_FD, "    Rule matches on reassembled stream.\n");
         }
         for(size_t i = 0; i < ARRAY_SIZE(analyzer_items); i++) {