From: Anoop Saldanha Date: Thu, 27 Jun 2013 04:36:37 +0000 (+0530) Subject: Don't let geoip match on pseudo packets. X-Git-Tag: suricata-2.0beta1~83 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=3304c91c917436162fec669fb69d897687bcda76;p=thirdparty%2Fsuricata.git Don't let geoip match on pseudo packets. --- diff --git a/src/detect-geoip.c b/src/detect-geoip.c index aa9da3709a..f3a865d3f7 100644 --- a/src/detect-geoip.c +++ b/src/detect-geoip.c @@ -169,6 +169,9 @@ static int DetectGeoipMatch(ThreadVars *t, DetectEngineThreadCtx *det_ctx, DetectGeoipData *geoipdata = (DetectGeoipData *)m->ctx; int matches = 0; + if (PKT_IS_PSEUDOPKT(p)) + return 0; + if (PKT_IS_IPV4(p)) { if (geoipdata->flags & ( GEOIP_MATCH_SRC_FLAG | GEOIP_MATCH_BOTH_FLAG ))