]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
detect: add debug statements to stream inspect
authorVictor Julien <victor@inliniac.net>
Wed, 8 Aug 2018 05:04:09 +0000 (07:04 +0200)
committerVictor Julien <victor@inliniac.net>
Wed, 8 Aug 2018 05:04:09 +0000 (07:04 +0200)
src/detect-engine-payload.c

index ce15ded4d5ee2a4323d5ca7cbc8d1dd870b3448d..2393a0b1c7b261ec9b20a860466c32da5736d079 100644 (file)
@@ -77,11 +77,13 @@ static void PrefilterPktStream(DetectEngineThreadCtx *det_ctx,
 
     /* for established packets inspect any stream we may have queued up */
     if (p->flags & PKT_DETECT_HAS_STREAMDATA) {
+        SCLogDebug("PRE det_ctx->raw_stream_progress %"PRIu64,
+                det_ctx->raw_stream_progress);
         struct StreamMpmData stream_mpm_data = { det_ctx, mpm_ctx };
         StreamReassembleRaw(p->flow->protoctx, p,
                 StreamMpmFunc, &stream_mpm_data,
                 &det_ctx->raw_stream_progress);
-        SCLogDebug("det_ctx->raw_stream_progress %"PRIu64,
+        SCLogDebug("POST det_ctx->raw_stream_progress %"PRIu64,
                 det_ctx->raw_stream_progress);
     } else {
         SCLogDebug("NOT p->flags & PKT_DETECT_HAS_STREAMDATA");
@@ -330,6 +332,8 @@ int DetectEngineInspectStream(ThreadVars *tv,
     if (ssn == NULL)
         return DETECT_ENGINE_INSPECT_SIG_CANT_MATCH;
 
+    SCLogDebug("pre-inspect det_ctx->raw_stream_progress %"PRIu64,
+            det_ctx->raw_stream_progress);
     uint64_t unused;
     struct StreamContentInspectEngineData inspect_data = { de_ctx, det_ctx, s, smd, f };
     int match = StreamReassembleRaw(f->protoctx, p,