detect: improve comments on mpm

diff --git a/src/detect.h b/src/detect.h
index 4b7b89c7d02e4c99ea4bcf5a96499803f8f36dad..e35a07761c74ea73f7094c5cf35c7db3307208d0 100644 (file)
--- a/src/detect.h
+++ b/src/detect.h
@@ -449,10 +449,13 @@ typedef struct Signature_ {
     SigMatch *dsize_sm;
     /* the fast pattern added from this signature */
     SigMatch *mpm_sm;
-    /* helper for init phase */
+
+    /* track max length for content. Indirectly used in grouping:
+     * used to set SigGroupHead::mpm_content_maxlen */
     uint16_t mpm_content_maxlen;
     uint16_t mpm_uricontent_maxlen;
 
+    /* SigMatch list used for adding content and friends. E.g. file_data; */
     int list;
 
     /* Be careful, this pointer is only valid while parsing the sig,
@@ -986,6 +989,7 @@ typedef struct SigGroupHead_ {
     /* number of sigs in this head */
     SigIntId sig_cnt;
 
+    /* track max length for content. Used in grouping */
     uint16_t mpm_content_maxlen;
 
     /** array of masks, used to check multiple masks against