From: Victor Julien <victor@inliniac.net>
Date: Fri, 1 Dec 2017 22:34:32 +0000 (+0100)
Subject: detect/http_host: add sid to nocase warning
X-Git-Tag: suricata-4.0.2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a92df64f40b10a243b1e18847f05dae1671253cb;p=thirdparty%2Fsuricata.git

detect/http_host: add sid to nocase warning
---

diff --git a/src/detect-http-hh.c b/src/detect-http-hh.c
index 6ce5e2efc1..2cb3e8221e 100644
--- a/src/detect-http-hh.c
+++ b/src/detect-http-hh.c
@@ -133,11 +133,11 @@ static _Bool DetectHttpHostValidateCallback(const Signature *s)
         if (sm->type == DETECT_CONTENT) {
             DetectContentData *cd = (DetectContentData *)sm->ctx;
             if (cd->flags & DETECT_CONTENT_NOCASE) {
-                SCLogWarning(SC_ERR_INVALID_SIGNATURE, "http_host keyword "
+                SCLogWarning(SC_WARN_POOR_RULE, "rule %u: http_host keyword "
                         "specified along with \"nocase\". "
                         "Since the hostname buffer we match against "
                         "is actually lowercase.  So having a "
-                        "nocase is redundant.");
+                        "nocase is redundant.", s->id);
             } else {
                 uint32_t u;
                 for (u = 0; u < cd->content_len; u++) {
@@ -145,11 +145,11 @@ static _Bool DetectHttpHostValidateCallback(const Signature *s)
                         break;
                 }
                 if (u != cd->content_len) {
-                    SCLogWarning(SC_ERR_INVALID_SIGNATURE, "A pattern with "
+                    SCLogWarning(SC_WARN_POOR_RULE, "rule %u: A pattern with "
                             "uppercase chars detected for http_host.  "
                             "Since the hostname buffer we match against "
                             "is lowercase only, please specify a "
-                            "lowercase pattern.");
+                            "lowercase pattern.", s->id);
                     return FALSE;
                 }
             }