file: don't 'close' file if we need to track it

diff --git a/src/util-file.c b/src/util-file.c
index ec5e4df4f1bc30811c83c6c13ad8f9b8a22ccd39..56be73eee65f426432c0b82b18988cc5f565c129 100644 (file)
--- a/src/util-file.c
+++ b/src/util-file.c
@@ -821,8 +821,10 @@ void FileDisableStoringForFile(File *ff)
     ff->flags |= FILE_NOSTORE;
 
     if (ff->state == FILE_STATE_OPENED && ff->size >= (uint64_t)FileMagicSize()) {
-        (void)FileCloseFilePtr(ff, NULL, 0,
-                (FILE_TRUNCATED|FILE_NOSTORE));
+        if (g_file_force_md5 == 0 && g_file_force_tracking == 0) {
+            (void)FileCloseFilePtr(ff, NULL, 0,
+                    (FILE_TRUNCATED|FILE_NOSTORE));
+        }
     }
 }