bug #496 - don't warn about offset/depth for packet sigs

13 years ago · 7833883a8f
parent d8356c5ebd
commit 7833883a8f
1 changed files with 1 additions and 1 deletions
--- a/src/detect-engine-analyzer.c
+++ b/src/detect-engine-analyzer.c
@ -514,7 +514,7 @@ void EngineAnalysisRules(Signature *s, char *line)
                               && (rule_pcre > 0 || rule_pcre_http > 0)*/) {
            fprintf(rule_engine_analysis_FD, "    Warning: Rule uses pcre with only a http_method content; possible performance issue.\n");
        }
-        if (rule_content_offset_depth > 0) {
+        if (rule_content_offset_depth > 0 && s->flags & SIG_FLAG_REQUIRE_STREAM) {
            fprintf(rule_engine_analysis_FD, "    Warning: Rule has depth"
                    "/offset with raw content keywords.  Please note the "
                    "offset/depth will be checked against both packet "