168
pm = SigMatchGetLastSMFromLists(s, 24,
168
pm = SigMatchGetLastSMFromLists(s, 28,
169
169
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_PMATCH],
170
170
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_UMATCH],
171
171
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HCBDMATCH],
177
177
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HSMDMATCH],
178
178
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HSCDMATCH],
179
179
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HRUDMATCH],
180
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HUADMATCH]);
180
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HUADMATCH],
181
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HHHDMATCH],
182
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HRHHDMATCH]);
181
183
if (pm == NULL) {
182
184
SCLogError(SC_ERR_WITHIN_MISSING_CONTENT, "\"within\" requires "
183
185
"preceding content, uricontent, http_client_body, "
184
186
"http_server_body, http_header, http_raw_header, "
185
187
"http_method, http_cookie, http_raw_uri, "
186
"http_stat_msg, http_stat_code or http_user_agent "
188
"http_stat_msg, http_stat_code, http_user_agent, "
189
"http_host or http_raw_host option");