alert-json: fix stream logging for IPS mode

Switch direction in IPS mode.
10 years ago · 0e22e95e47
parent 5037ea93f3
commit 0e22e95e47
1 changed files with 11 additions and 3 deletions
--- a/src/output-json-alert.c
+++ b/src/output-json-alert.c
@ -267,10 +267,18 @@ static int AlertJson(ThreadVars *tv, JsonAlertLogThread *aft, const Packet *p)

                MemBufferReset(payload);

-                if (p->flowflags & FLOW_PKT_TOSERVER) {
-                    flag = FLOW_PKT_TOCLIENT;
+                if (!EngineModeIsIPS()) {
+                    if (p->flowflags & FLOW_PKT_TOSERVER) {
+                        flag = FLOW_PKT_TOCLIENT;
+                    } else {
+                        flag = FLOW_PKT_TOSERVER;
+                    }
                } else {
-                    flag = FLOW_PKT_TOSERVER;
+                    if (p->flowflags & FLOW_PKT_TOSERVER) {
+                        flag = FLOW_PKT_TOSERVER;
+                    } else {
+                        flag = FLOW_PKT_TOCLIENT;
+                    }
                }

                StreamSegmentForEach((const Packet *)p, flag,