detect/flowint: only check if packet has flow

Fixed bug #2288.

diff --git a/src/detect.c b/src/detect.c
index 1816c4a5f1d43a18edda48c20282c9b624bedd4f..9660b025484f9d23a42105150f9db80ddd7d92ab 100644 (file)
--- a/src/detect.c
+++ b/src/detect.c
@@ -2070,6 +2070,12 @@ static int SignatureCreateMask(Signature *s)
                         "flowbit(s)");
                 break;
             }
+            case DETECT_FLOWINT:
+                /* flow is required for any flowint manipulation */
+                s->mask |= SIG_MASK_REQUIRE_FLOW;
+                SCLogDebug("sig requires flow to be able to manipulate "
+                        "flowint(s)");
+                break;
             case DETECT_FLAGS:
             {
                 DetectFlagsData *fl = (DetectFlagsData *)sm->ctx;