output: rename reject-target to reject_target

Ticket: 6502

Forbid dashes in json keys for better use by processing tools
pull/15315/head
Philippe Antoine 4 months ago committed by Victor Julien
parent 18f742fdbd
commit d030ea7f29

@ -487,7 +487,7 @@ Example:
"verdict": {
"action": "drop",
"reject-target": "to_client",
"reject_target": "to_client",
"reject": "[icmp-prohib]"
}

@ -55,6 +55,8 @@ Logging Changes
E.g., previously, ``ether_type`` values were logged in host order; an ethertype value of ``0xfbb7``
(network order) was logged as `47099`` (``0xb7fb``). This ethertype value will be logged as ``64439``.
- Alert verdict key is changed from to ``reject-target`` to ``reject_target``
Other Changes
~~~~~~~~~~~~~
- ``engine-analysis`` output has been changed for keywords that now use the generic integers framework

@ -9081,7 +9081,7 @@
]
}
},
"reject-target": {
"reject_target": {
"type": "string",
"oneOf": [
{

@ -554,11 +554,11 @@ void EveAddVerdict(SCJsonBuilder *jb, const Packet *p, const uint8_t alert_actio
JB_SET_STRING(jb, "action", "alert");
}
if (packet_action & ACTION_REJECT) {
JB_SET_STRING(jb, "reject-target", "to_client");
JB_SET_STRING(jb, "reject_target", "to_client");
} else if (packet_action & ACTION_REJECT_DST) {
JB_SET_STRING(jb, "reject-target", "to_server");
JB_SET_STRING(jb, "reject_target", "to_server");
} else if (packet_action & ACTION_REJECT_BOTH) {
JB_SET_STRING(jb, "reject-target", "both");
JB_SET_STRING(jb, "reject_target", "both");
}
SCJbOpenArray(jb, "reject");
switch (p->proto) {

Loading…
Cancel
Save