From 02cbbd0b89cc76b6529a8cae25f69446635c2eb4 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Thu, 19 Sep 2013 10:57:46 +0200 Subject: [PATCH] unified2: fix tags not being logged. Bug #968 --- src/alert-unified2-alert.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/alert-unified2-alert.c b/src/alert-unified2-alert.c index fdc8d5643a..dd399f5753 100644 --- a/src/alert-unified2-alert.c +++ b/src/alert-unified2-alert.c @@ -385,7 +385,7 @@ TmEcode Unified2Alert (ThreadVars *t, Packet *p, void *data, PacketQueue *pq, Pa Unified2AlertThread *aun = (Unified2AlertThread *)data; aun->xff_flags = UNIFIED2_ALERT_XFF_DISABLED; - if (p->alerts.cnt == 0) + if (p->alerts.cnt == 0 && !(p->flags & PKT_HAS_TAG)) return TM_ECODE_OK; if (!(aun->unified2alert_ctx->xff_mode & UNIFIED2_ALERT_XFF_DISABLED) && @@ -880,7 +880,7 @@ int Unified2IPv6TypeAlert (ThreadVars *t, Packet *p, void *data, PacketQueue *pq int ret; unsigned int event_id; - if (p->alerts.cnt == 0) + if (p->alerts.cnt == 0 && !(p->flags & PKT_HAS_TAG)) return 0; length = (sizeof(Unified2AlertFileHeader) + sizeof(AlertIPv6Unified2)); @@ -1039,7 +1039,7 @@ int Unified2IPv4TypeAlert (ThreadVars *tv, Packet *p, void *data, PacketQueue *p int ret; unsigned int event_id; - if (p->alerts.cnt == 0) + if (p->alerts.cnt == 0 && !(p->flags & PKT_HAS_TAG)) return 0; length = (sizeof(Unified2AlertFileHeader) + sizeof(AlertIPv4Unified2)); -- 2.47.3