Optimization #7002: detect: move pseudo packet checks out of keyword Match funcs - Suricata - Open Information Security Foundation

Actions

Optimization #7002

closed

Status:

Closed

Priority:

Normal

Assignee:

Target version:

Effort:

Difficulty:

Label:

Description

A couple of keywords can only match against real packets, so they check against the PKT_IS_PSEUDOPKT macro.

While a cheap check, this seems unnecessary to do in the Match funcs.

Related issues 2 (0 open — 2 closed)

Actions

Also available in: Atom PDF

	Related to Suricata - Optimization #6728: detect: prefilter for events (decode, stream, app-layer, etc...)	Closed	Philippe Antoine				Actions
	Related to Suricata - Bug #6291: Performance degradation on Suricata devices with a small number of rules	Closed	Cole Dishington				Actions