From 9336ab5dcdb6559b167240a3aafb274e19bc5c2f Mon Sep 17 00:00:00 2001
From: Victor Julien <vjulien@oisf.net>
Date: Sat, 23 Apr 2022 09:59:21 +0200
Subject: [PATCH] eve: add pkt_src

This will tell the user if a record was generated based on a real packet,
a flow timeout packet or others.
---
 src/output-json.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/output-json.c b/src/output-json.c
index 3ff8d1bb0e..b1fb4acf5b 100644
--- a/src/output-json.c
+++ b/src/output-json.c
@@ -905,6 +905,8 @@ JsonBuilder *CreateEveHeader(const Packet *p, enum OutputJsonLogDirection dir,
             break;
     }
 
+    jb_set_string(js, "pkt_src", PktSrcToString(p->pkt_src));
+
     if (eve_ctx != NULL) {
         EveAddCommonOptions(&eve_ctx->cfg, p, f, js);
     }