From 9324ed7b90043fc2fe9bdf8cfb71a2d6d70b3d89 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Thu, 5 Jan 2012 16:48:48 +0100 Subject: [PATCH] Fix icmpv6 ip-only rule not firing. #363. --- src/detect-engine-iponly.c | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-) diff --git a/src/detect-engine-iponly.c b/src/detect-engine-iponly.c index de67cf8e78..4d67a4470a 100644 --- a/src/detect-engine-iponly.c +++ b/src/detect-engine-iponly.c @@ -1025,7 +1025,7 @@ void IPOnlyMatchPacket(ThreadVars *tv, if (bitarray & 0x01) { Signature *s = de_ctx->sig_array[u * 8 + i]; - if (DetectProtoContainsProto(&s->proto, IP_GET_IPPROTO(p)) == 0) { + if (DetectProtoContainsProto(&s->proto, p->proto) == 0) { SCLogDebug("proto didn't match"); continue; } @@ -1046,13 +1046,6 @@ void IPOnlyMatchPacket(ThreadVars *tv, continue; } } - } else { - if (!(s->flags & SIG_FLAG_DP_ANY)) { - continue; - } - if (!(s->flags & SIG_FLAG_SP_ANY)) { - continue; - } } if (!IPOnlyMatchCompatSMs(tv, det_ctx, s, p)) {