On 05/16/2013 12:46 PM, Anoop Saldanha wrote:
> In src/detect.c:
> 
>> @@ -1622,18 +1650,9 @@ int SigMatchSignatures(ThreadVars *th_v, DetectEngineCtx *de_ctx, DetectEngineTh
>>  
>>  end:
>>      /* see if we need to increment the inspect_id and reset the de_state */
>> -    if (alstate != NULL && alproto != ALPROTO_HTTP) {
>> +    if (alstate != NULL && alproto == ALPROTO_HTTP) {
> 
> Not sure, I understand. The inspect_id call is applicable for tx based
> protos only. If we don't it will be called for other protos like ssl.

We need TX handling for non-HTTP as well, like for DNS. That would need
to be supported here as well, right?