eve/smb: add tx_id to event

As SMB protocol is using heavily transactions, getting the transaction
ID in SMB events can be really useful for automated analysis.
pull/13044/head
Eric Leblond 4 years ago committed by Victor Julien
parent 16f74c68aa
commit db11078315

@ -64,7 +64,8 @@ static int JsonSMBLogger(ThreadVars *tv, void *thread_data,
{
LogSmbLogThread *thread = thread_data;
SCJsonBuilder *jb = CreateEveHeader(p, LOG_DIR_FLOW, "smb", NULL, thread->ctx->ctx);
SCJsonBuilder *jb =
CreateEveHeaderWithTxId(p, LOG_DIR_FLOW, "smb", NULL, tx_id, thread->ctx->ctx);
if (unlikely(jb == NULL)) {
return TM_ECODE_FAILED;
}

Loading…
Cancel
Save