flow: log action applied to all packets

Log if action applied to whole flow is drop or pass.
pull/6383/head
Victor Julien 4 years ago
parent 3874d08015
commit 9a09fe454b

@ -273,6 +273,12 @@ static void EveFlowLogJSON(OutputJsonThreadCtx *aft, JsonBuilder *jb, Flow *f)
if (f->flags & FLOW_WRONG_THREAD)
JB_SET_TRUE(jb, "wrong_thread");
if (f->flags & FLOW_ACTION_DROP) {
JB_SET_STRING(jb, "action", "drop");
} else if (f->flags & FLOW_ACTION_PASS) {
JB_SET_STRING(jb, "action", "pass");
}
/* Close flow. */
jb_close(jb);

Loading…
Cancel
Save