From 5928be4751422634b2cd316eed6a90fa043d8f53 Mon Sep 17 00:00:00 2001 From: Jeff Lucovsky Date: Sat, 7 Oct 2023 17:06:52 -0400 Subject: [PATCH] detect/flag: Pseudo pkt "flush log" flag Issue: 3449 Add a flush directive to the packet that is distinct from the existing "log flush" flag as the new flag is to distinguish between the 2 use cases. --- src/decode.h | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/decode.h b/src/decode.h index 1b299864a7c0..73c20f915f00 100644 --- a/src/decode.h +++ b/src/decode.h @@ -1317,9 +1317,12 @@ void DecodeUnregisterCounters(void); #define PKT_FIRST_ALERTS BIT_U32(29) #define PKT_FIRST_TAG BIT_U32(30) +#define PKT_PSEUDO_LOG_FLUSH BIT_U32(31) /**< Detect/log flush for protocol upgrade */ + /** \brief return 1 if the packet is a pseudo packet */ #define PKT_IS_PSEUDOPKT(p) \ ((p)->flags & (PKT_PSEUDO_STREAM_END|PKT_PSEUDO_DETECTLOG_FLUSH)) +#define PKT_IS_FLUSHPKT(p) ((p)->flags & (PKT_PSEUDO_LOG_FLUSH)) #define PKT_SET_SRC(p, src_val) ((p)->pkt_src = src_val)