pcap-log: only allow one instance of pcap-log

As a global is used to store state, only one instance can be used.

See https://redmine.openinfosecfoundation.org/issues/7640.

diff --git a/src/log-pcap.c b/src/log-pcap.c
index 45c6e2aaf155474a277857d66f057bea971a819d..f426c27029eba33461bb59c3f4efec871101e859 100644 (file)
--- a/src/log-pcap.c
+++ b/src/log-pcap.c
@@ -1343,6 +1343,10 @@ static OutputInitResult PcapLogInitCtx(SCConfNode *conf)
     int en;
     PCRE2_SIZE eo = 0;
 
+    if (g_pcap_data) {
+        FatalError("A pcap-log instance is already active, only one can be enabled.");
+    }
+
     PcapLogData *pl = SCCalloc(1, sizeof(PcapLogData));
     if (unlikely(pl == NULL)) {
         FatalError("Failed to allocate Memory for PcapLogData");