eve: add pkt_src

This will tell the user if a record was generated based on a real packet,
a flow timeout packet or others.
pull/7295/head
Victor Julien 3 years ago
parent ddf9c9dcad
commit 9336ab5dcd

@ -905,6 +905,8 @@ JsonBuilder *CreateEveHeader(const Packet *p, enum OutputJsonLogDirection dir,
break;
}
jb_set_string(js, "pkt_src", PktSrcToString(p->pkt_src));
if (eve_ctx != NULL) {
EveAddCommonOptions(&eve_ctx->cfg, p, f, js);
}

Loading…
Cancel
Save