eve: log max regions

pull/8406/head
Victor Julien 4 years ago
parent 1bb6f44ff0
commit 96dfd65b96

@ -5285,6 +5285,9 @@
"tc_gap": { "tc_gap": {
"type": "boolean" "type": "boolean"
}, },
"tc_max_regions": {
"type": "integer"
},
"tcp_flags": { "tcp_flags": {
"type": "string" "type": "string"
}, },
@ -5297,6 +5300,9 @@
"ts_gap": { "ts_gap": {
"type": "boolean" "type": "boolean"
}, },
"ts_max_regions": {
"type": "integer"
},
"urg": { "urg": {
"type": "boolean" "type": "boolean"
} }

@ -313,6 +313,9 @@ static void EveFlowLogJSON(OutputJsonThreadCtx *aft, JsonBuilder *jb, Flow *f)
if (FlowHasGaps(f, STREAM_TOSERVER)) { if (FlowHasGaps(f, STREAM_TOSERVER)) {
JB_SET_TRUE(jb, "ts_gap"); JB_SET_TRUE(jb, "ts_gap");
} }
jb_set_uint(jb, "ts_max_regions", ssn->client.sb.max_regions);
jb_set_uint(jb, "tc_max_regions", ssn->server.sb.max_regions);
} }
/* Close tcp. */ /* Close tcp. */

Loading…
Cancel
Save