From: Eric Leblond <eric@regit.org>
Date: Fri, 19 Dec 2014 14:06:30 +0000 (+0100)
Subject: app-layer: fix 'detection-only' keyword
X-Git-Tag: suricata-2.1beta3~69
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F1279%2Fhead;p=thirdparty%2Fsuricata.git

app-layer: fix 'detection-only' keyword

If we follow the description in the yaml file, we should disable
parsing if 'detection-only' keyword is used.
---

diff --git a/src/app-layer-parser.c b/src/app-layer-parser.c
index ec45b0caf8..c32f721c12 100644
--- a/src/app-layer-parser.c
+++ b/src/app-layer-parser.c
@@ -280,7 +280,7 @@ int AppLayerParserConfParserEnabled(const char *ipproto,
     } else if (strcasecmp(node->val, "no") == 0) {
         goto disabled;
     } else if (strcasecmp(node->val, "detection-only") == 0) {
-        goto enabled;
+        goto disabled;
     } else {
         SCLogError(SC_ERR_FATAL, "Invalid value found for %s.", param);
         exit(EXIT_FAILURE);