eve: add pkt_src

This will tell the user if a record was generated based on a real packet,
a flow timeout packet or others.
pull/7295/head
Victor Julien 4 years ago
parent ddf9c9dcad
commit 9336ab5dcd

@ -905,6 +905,8 @@ JsonBuilder *CreateEveHeader(const Packet *p, enum OutputJsonLogDirection dir,
break; break;
} }
jb_set_string(js, "pkt_src", PktSrcToString(p->pkt_src));
if (eve_ctx != NULL) { if (eve_ctx != NULL) {
EveAddCommonOptions(&eve_ctx->cfg, p, f, js); EveAddCommonOptions(&eve_ctx->cfg, p, f, js);
} }

Loading…
Cancel
Save