Don't set tag on pseudo packets

diff --git a/src/detect-engine-alert.c b/src/detect-engine-alert.c
index 6fa16c4d8063c1e9f84510c8bfd60d0f326b3764..bc37347626dd26faff283380837b6884f8cda175 100644 (file)
--- a/src/detect-engine-alert.c
+++ b/src/detect-engine-alert.c
@@ -282,7 +282,8 @@ void PacketAlertFinalize(DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx
 
     /* At this point, we should have all the new alerts. Now check the tag
      * keyword context for sessions and hosts */
-    TagHandlePacket(de_ctx, det_ctx, p);
+    if (!(p->flags & PKT_PSEUDO_STREAM_END))
+        TagHandlePacket(de_ctx, det_ctx, p);
 }