[Snort-devel] A better patch to rules.c

Phil Wood cpw at ...86...
Tue Nov 28 23:00:52 EST 2000


Sorry about the previous patch.  I think the break didn't do what I thought.

This looks better?

*** rules.c.old	Sun Nov 26 08:21:56 2000
--- rules.c	Tue Nov 28 20:04:44 2000
***************
*** 1,3 ****
! /* $Id$ */
  /*
  ** Copyright (C) 1998,1999,2000 Martin Roesch <roesch at ...16...>
--- 1,3 ----
! /* $Id: rules.c,v 1.1 2000/11/29 03:01:42 cpw Exp cpw $ */
  /*
  ** Copyright (C) 1998,1999,2000 Martin Roesch <roesch at ...16...>
***************
*** 3784,3787 ****
--- 3784,3788 ----
              printf("  SIP match\n");
  #endif
+ 	    if(!(idx->addr_flags & EXCEPT_IP))
              /* the packet matches this test, proceed to the next test */
              return fp_list->next->RuleHeadFunc(p, rtn_idx, fp_list->next);
***************
*** 3882,3885 ****
--- 3883,3887 ----
                  printf("  DIP match\n");
  #endif
+ 		if(!(idx->addr_flags & EXCEPT_IP))
                  return fp_list->next->RuleHeadFunc(p, rtn_idx, fp_list->next);
          }



More information about the Snort-devel mailing list