From d12761233cc57938f45853341ebe5e0c76990bb3 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Thu, 19 Sep 2013 10:59:52 +0200 Subject: [PATCH] Don't set tag on pseudo packets --- src/detect-engine-alert.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/detect-engine-alert.c b/src/detect-engine-alert.c index 6fa16c4d80..bc37347626 100644 --- a/src/detect-engine-alert.c +++ b/src/detect-engine-alert.c @@ -282,7 +282,8 @@ void PacketAlertFinalize(DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx /* At this point, we should have all the new alerts. Now check the tag * keyword context for sessions and hosts */ - TagHandlePacket(de_ctx, det_ctx, p); + if (!(p->flags & PKT_PSEUDO_STREAM_END)) + TagHandlePacket(de_ctx, det_ctx, p); } -- 2.47.2