flow: log gap state per direction

6 years ago · f98b5ecd6a
parent 2a3cb32071
commit f98b5ecd6a
1 changed files with 4 additions and 0 deletions
--- a/src/output-json-flow.c
+++ b/src/output-json-flow.c
@ -346,6 +346,10 @@ static void JsonFlowLogJSON(JsonFlowLogThread *aft, json_t *js, Flow *f)
                    break;
            }
            json_object_set_new(tjs, "state", json_string(tcp_state));
+            if (ssn->client.flags & STREAMTCP_STREAM_FLAG_GAP)
+                json_object_set_new(tjs, "gap_ts", json_true());
+            if (ssn->server.flags & STREAMTCP_STREAM_FLAG_GAP)
+                json_object_set_new(tjs, "gap_tc", json_true());
        }

        json_object_set_new(js, "tcp", tjs);