diff --git a/src/detect.c b/src/detect.c index 2e57f87786..a6b47f4ed2 100644 --- a/src/detect.c +++ b/src/detect.c @@ -2045,7 +2045,8 @@ static void PacketCreateMask(Packet *p, SignatureMask *mask, uint16_t alproto, void *alstate, StreamMsg *smsg, int app_decoder_events) { - if (!(p->flags & PKT_NOPAYLOAD_INSPECTION) && (p->payload_len > 0 || smsg != NULL)) { + /* no payload inspect flag doesn't apply to smsg */ + if (smsg != NULL || (!(p->flags & PKT_NOPAYLOAD_INSPECTION) && p->payload_len > 0)) { SCLogDebug("packet has payload"); (*mask) |= SIG_MASK_REQUIRE_PAYLOAD; } else {