From: Victor Julien Date: Thu, 19 Sep 2013 08:59:52 +0000 (+0200) Subject: Don't set tag on pseudo packets X-Git-Tag: suricata-2.0beta2~352 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F556%2Fhead;p=thirdparty%2Fsuricata.git Don't set tag on pseudo packets --- diff --git a/src/detect-engine-alert.c b/src/detect-engine-alert.c index 6fa16c4d80..bc37347626 100644 --- a/src/detect-engine-alert.c +++ b/src/detect-engine-alert.c @@ -282,7 +282,8 @@ void PacketAlertFinalize(DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx /* At this point, we should have all the new alerts. Now check the tag * keyword context for sessions and hosts */ - TagHandlePacket(de_ctx, det_ctx, p); + if (!(p->flags & PKT_PSEUDO_STREAM_END)) + TagHandlePacket(de_ctx, det_ctx, p); }