From d7e13c2c039901fdc4042431d693be31fe1c7ef1 Mon Sep 17 00:00:00 2001 From: Eric Leblond Date: Wed, 29 Apr 2015 18:25:05 +0200 Subject: [PATCH] email-json: output MIME parsing status If the status is not PARSE_DONE then in that case we may have imcomplete information. Increasing the stream reassemly depth in that case would be a good idea. --- src/output-json-email-common.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/output-json-email-common.c b/src/output-json-email-common.c index 17d4b0ec00..f5366efb97 100644 --- a/src/output-json-email-common.c +++ b/src/output-json-email-common.c @@ -104,6 +104,9 @@ TmEcode JsonEmailLogJson(JsonEmailLogThread *aft, json_t *js, const Packet *p, F } #endif + json_object_set_new(sjs, "status", + json_string(MimeDecParseStateGetStatus(mime_state))); + if ((entity->header_flags & HDR_IS_LOGGED) == 0) { MimeDecField *field; //printf("email LOG\n");