From 89f3346c3c18ac785a5e32760dd847fd35f06e3d Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Wed, 8 Feb 2023 20:02:09 +0100 Subject: [PATCH] eve/flow: optimize tcp gap checks --- src/output-json-flow.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/output-json-flow.c b/src/output-json-flow.c index f1aaaee172..a52e20eb28 100644 --- a/src/output-json-flow.c +++ b/src/output-json-flow.c @@ -305,10 +305,10 @@ static void EveFlowLogJSON(OutputJsonThreadCtx *aft, JsonBuilder *jb, Flow *f) const char *tcp_state = StreamTcpStateAsString(ssn->state); if (tcp_state != NULL) jb_set_string(jb, "state", tcp_state); - if (FlowHasGaps(f, STREAM_TOCLIENT)) { + if (ssn->server.flags & STREAMTCP_STREAM_FLAG_HAS_GAP) { JB_SET_TRUE(jb, "tc_gap"); } - if (FlowHasGaps(f, STREAM_TOSERVER)) { + if (ssn->client.flags & STREAMTCP_STREAM_FLAG_HAS_GAP) { JB_SET_TRUE(jb, "ts_gap"); }