eve-parity: handle arrays of scalars

And add an example with "client_alpns".
pull/12743/head
Jason Ish 9 months ago committed by Victor Julien
parent 15da9d783e
commit 744f301df4

@ -6774,6 +6774,9 @@
"client_alpns": { "client_alpns": {
"description": "TLS client ALPN field(s)", "description": "TLS client ALPN field(s)",
"type": "array", "type": "array",
"suricata": {
"keywords": ["tls.alpn"]
},
"items": { "items": {
"type": "string" "type": "string"
} }

@ -118,9 +118,8 @@ def load_schema():
), ),
) )
else: else:
# May want to warn that this array has no properties.
key = ".".join(path + [name]) key = ".".join(path + [name])
keys[key] = {} keys[key] = props.get("suricata", {})
else: else:
# May want to warn that this array has no items. # May want to warn that this array has no items.
key = ".".join(path + [name]) key = ".".join(path + [name])

Loading…
Cancel
Save