From: Victor Julien Date: Fri, 17 Jul 2015 11:38:36 +0000 (+0200) Subject: detect: make http prefilter use disrupt flags X-Git-Tag: suricata-3.0RC1~231 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=814f0b40945f238b7168809136ebc02ef3c8b92e;p=thirdparty%2Fsuricata.git detect: make http prefilter use disrupt flags --- diff --git a/src/detect.c b/src/detect.c index de40ccd8ff..d40b91bb1a 100644 --- a/src/detect.c +++ b/src/detect.c @@ -901,7 +901,7 @@ static inline void DetectMpmPrefilter(DetectEngineCtx *de_ctx, continue; if (p->flowflags & FLOW_PKT_TOSERVER) { - tx_progress = AppLayerParserGetStateProgress(IPPROTO_TCP, ALPROTO_HTTP, tx, STREAM_TOSERVER); + tx_progress = AppLayerParserGetStateProgress(IPPROTO_TCP, ALPROTO_HTTP, tx, flags); if (tx_progress > HTP_REQUEST_LINE) { if (det_ctx->sgh->flags & SIG_GROUP_HEAD_MPM_URI) { @@ -962,7 +962,7 @@ static inline void DetectMpmPrefilter(DetectEngineCtx *de_ctx, } } } else { /* implied FLOW_PKT_TOCLIENT */ - tx_progress = AppLayerParserGetStateProgress(IPPROTO_TCP, ALPROTO_HTTP, tx, STREAM_TOCLIENT); + tx_progress = AppLayerParserGetStateProgress(IPPROTO_TCP, ALPROTO_HTTP, tx, flags); if (tx_progress > HTP_RESPONSE_LINE) { if (det_ctx->sgh->flags & SIG_GROUP_HEAD_MPM_HSMD) {