|
|
|
@ -5356,11 +5356,9 @@ int StreamTcpPacket (ThreadVars *tv, Packet *p, StreamTcpThread *stt,
|
|
|
|
* applayer detection, then drop the rest of the packets of the
|
|
|
|
* applayer detection, then drop the rest of the packets of the
|
|
|
|
* same stream and avoid inspecting it any further */
|
|
|
|
* same stream and avoid inspecting it any further */
|
|
|
|
if (StreamTcpCheckFlowDrops(p) == 1) {
|
|
|
|
if (StreamTcpCheckFlowDrops(p) == 1) {
|
|
|
|
SCLogDebug("This flow/stream triggered a drop rule");
|
|
|
|
DEBUG_VALIDATE_BUG_ON(!(PKT_IS_PSEUDOPKT(p)) && !PacketCheckAction(p, ACTION_DROP));
|
|
|
|
FlowSetNoPacketInspectionFlag(p->flow);
|
|
|
|
SCLogDebug("flow triggered a drop rule");
|
|
|
|
DecodeSetNoPacketInspectionFlag(p);
|
|
|
|
|
|
|
|
StreamTcpDisableAppLayer(p->flow);
|
|
|
|
StreamTcpDisableAppLayer(p->flow);
|
|
|
|
PacketDrop(p, ACTION_DROP, PKT_DROP_REASON_FLOW_DROP);
|
|
|
|
|
|
|
|
/* return the segments to the pool */
|
|
|
|
/* return the segments to the pool */
|
|
|
|
StreamTcpSessionPktFree(p);
|
|
|
|
StreamTcpSessionPktFree(p);
|
|
|
|
SCReturnInt(0);
|
|
|
|
SCReturnInt(0);
|
|
|
|
|