]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect: introduce "like" ip-only signature type 7495/head
authorJason Ish <jason.ish@oisf.net>
Wed, 11 May 2022 17:23:24 +0000 (11:23 -0600)
committerVictor Julien <vjulien@oisf.net>
Tue, 7 Jun 2022 05:56:23 +0000 (07:56 +0200)
commit6ba16e883eb4502aec21777c2db1281a6f0cae25
tree01e5c9cae333ecd1b629614d298a8ad040430e30
parent5ed73e839f86802a9235c9538050d855d5213e3f
detect: introduce "like" ip-only signature type

Rules that look like they should be IP-only but contain a negated rule
address are now marked with an LIKE_IPONLY flag. This is so they are
treated like IPONLY rules with respect to flow action, but don't
interfere with other IPONLY processing like using the radix tree.

Ticket: #5361
(cherry picked from commit c8a52070835c16612346ef14c2633412b6344a8c)
src/detect-engine-alert.c
src/detect-engine-build.c
src/detect.h