From 9195708d58cea902423f761d45ca070ec1d980e6 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Fri, 19 Aug 2016 17:04:51 +0200 Subject: [PATCH] detect analyzer: give minimal prefilter info --- src/detect-engine-analyzer.c | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/src/detect-engine-analyzer.c b/src/detect-engine-analyzer.c index 2933c0a6d2..23775349f9 100644 --- a/src/detect-engine-analyzer.c +++ b/src/detect-engine-analyzer.c @@ -95,6 +95,13 @@ void EngineAnalysisFP(Signature *s, char *line) fprintf(fp_engine_analysis_FD, "%s\n", line); fprintf(fp_engine_analysis_FD, " Fast Pattern analysis:\n"); + if (s->prefilter_sm != NULL) { + fprintf(fp_engine_analysis_FD, " Prefilter on: %s\n", + sigmatch_table[s->prefilter_sm->type].name); + fprintf(fp_engine_analysis_FD, "\n"); + return; + } + if (fp_cd == NULL) { fprintf(fp_engine_analysis_FD, " No content present\n"); fprintf(fp_engine_analysis_FD, "\n"); @@ -858,7 +865,12 @@ void EngineAnalysisRules(const Signature *s, const char *line) } /* print fast pattern info */ - EngineAnalysisRulesPrintFP(s); + if (s->prefilter_sm) { + fprintf(rule_engine_analysis_FD, " Prefilter on: %s.\n", + sigmatch_table[s->prefilter_sm->type].name); + } else { + EngineAnalysisRulesPrintFP(s); + } /* this is where the warnings start */ if (warn_pcre_no_content /*rule_pcre > 0 && rule_content == 0 && rule_content_http == 0*/) {