|
|
|
|
@ -116,6 +116,7 @@ int DetectEngineEventMatch (ThreadVars *t, DetectEngineThreadCtx *det_ctx, Packe
|
|
|
|
|
DetectEngineEventData *de = (DetectEngineEventData *)m->ctx;
|
|
|
|
|
|
|
|
|
|
if (ENGINE_ISSET_EVENT(p, de->event)) {
|
|
|
|
|
SCLogDebug("de->event matched %u", de->event);
|
|
|
|
|
SCReturnInt(1);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@ -197,6 +198,8 @@ static int _DetectEngineEventSetup (DetectEngineCtx *de_ctx, Signature *s, char
|
|
|
|
|
if (de == NULL)
|
|
|
|
|
goto error;
|
|
|
|
|
|
|
|
|
|
SCLogDebug("rawstr %s %u", rawstr, de->event);
|
|
|
|
|
|
|
|
|
|
sm = SigMatchAlloc();
|
|
|
|
|
if (sm == NULL)
|
|
|
|
|
goto error;
|
|
|
|
|
@ -218,6 +221,7 @@ static int DetectEngineEventSetup (DetectEngineCtx *de_ctx, Signature *s, char *
|
|
|
|
|
{
|
|
|
|
|
return _DetectEngineEventSetup (de_ctx, s, rawstr, DETECT_ENGINE_EVENT);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* \brief this function will free memory associated with DetectEngineEventData
|
|
|
|
|
*
|
|
|
|
|
|