From ae80ed596408ebe0cae58d73537d295ecd9de3b7 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Wed, 30 Sep 2015 12:41:42 +0200 Subject: [PATCH] detect: make port grouping use config limits --- src/detect.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/detect.c b/src/detect.c index 1fdbe10812..c7d1040d7c 100644 --- a/src/detect.c +++ b/src/detect.c @@ -3046,7 +3046,9 @@ static DetectPort *RulesGroupByPorts(DetectEngineCtx *de_ctx, int ipproto, uint3 SCLogDebug("rules analyzed"); DetectPort *newlist = NULL; - CreateGroupedPortList(de_ctx, list, &newlist, 10, CreateGroupedPortListCmpCnt, max_idx); + uint16_t groupmax = (direction == SIG_FLAG_TOCLIENT) ? de_ctx->max_uniq_toclient_dp_groups : + de_ctx->max_uniq_toserver_dp_groups; + CreateGroupedPortList(de_ctx, list, &newlist, groupmax, CreateGroupedPortListCmpCnt, max_idx); list = newlist; /* step 2: deduplicate the SGH's */