detect/analyzer: add more details for the tcp window keyword

Ticket: 6352
pull/12088/head
Nancy Enos 4 months ago committed by Victor Julien
parent 5d8252117f
commit 98cd2411b6

@ -52,6 +52,7 @@
#include "detect-flowbits.h"
#include "util-var-name.h"
#include "detect-icmp-id.h"
#include "detect-tcp-window.h"
static int rule_warnings_only = 0;
@ -932,6 +933,14 @@ static void DumpMatches(RuleAnalyzer *ctx, JsonBuilder *js, const SigMatchData *
jb_close(js);
break;
}
case DETECT_WINDOW: {
const DetectWindowData *wd = (const DetectWindowData *)smd->ctx;
jb_open_object(js, "window");
jb_set_uint(js, "size", wd->size);
jb_set_bool(js, "negated", wd->negated);
jb_close(js);
break;
}
case DETECT_FLOW_AGE: {
const DetectU32Data *cd = (const DetectU32Data *)smd->ctx;
jb_open_object(js, "flow_age");

Loading…
Cancel
Save