From 3304c91c917436162fec669fb69d897687bcda76 Mon Sep 17 00:00:00 2001 From: Anoop Saldanha Date: Thu, 27 Jun 2013 10:06:37 +0530 Subject: [PATCH] Don't let geoip match on pseudo packets. --- src/detect-geoip.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/detect-geoip.c b/src/detect-geoip.c index aa9da3709a..f3a865d3f7 100644 --- a/src/detect-geoip.c +++ b/src/detect-geoip.c @@ -169,6 +169,9 @@ static int DetectGeoipMatch(ThreadVars *t, DetectEngineThreadCtx *det_ctx, DetectGeoipData *geoipdata = (DetectGeoipData *)m->ctx; int matches = 0; + if (PKT_IS_PSEUDOPKT(p)) + return 0; + if (PKT_IS_IPV4(p)) { if (geoipdata->flags & ( GEOIP_MATCH_SRC_FLAG | GEOIP_MATCH_BOTH_FLAG ))