file_data: unify inspect engines

Call HTTP from the generic file_data engine.
pull/3108/head
Victor Julien 8 years ago
parent ac0ae2dcd1
commit 6e65cf138b

@ -35,6 +35,7 @@
#include "detect-engine-content-inspection.h"
#include "detect-engine-prefilter.h"
#include "detect-engine-filedata.h"
#include "detect-engine-hsbd.h"
#include "flow-util.h"
#include "util-debug.h"
@ -191,6 +192,11 @@ int DetectEngineInspectFiledata(ThreadVars *tv,
uint32_t stream_start_offset = 0;
const uint8_t *buffer = 0;
if (f->alproto == ALPROTO_HTTP) {
return DetectEngineInspectHttpServerBody(tv, de_ctx, det_ctx, s,
smd, f, flags, alstate, tx, tx_id);
}
FileContainer *ffc = AppLayerParserGetFiles(f->proto, f->alproto,
f->alstate, flags);
if (ffc == NULL) {

@ -77,7 +77,7 @@ void DetectFiledataRegister(void)
DetectAppLayerInspectEngineRegister("file_data",
ALPROTO_HTTP, SIG_FLAG_TOCLIENT, HTP_RESPONSE_BODY,
DetectEngineInspectHttpServerBody);
DetectEngineInspectFiledata);
DetectAppLayerInspectEngineRegister("file_data",
ALPROTO_SMTP, SIG_FLAG_TOSERVER, 0,
DetectEngineInspectFiledata);

Loading…
Cancel
Save