]> git.ipfire.org Git - thirdparty/suricata.git/commit
projects / thirdparty / suricata.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cfcb7df) | patch
flow: complete stats for app_layer protocol counters
authorPhilippe Antoine <pantoine@oisf.net>
Mon, 26 Dec 2022 20:07:36 +0000 (21:07 +0100)
committerVictor Julien <vjulien@oisf.net>
Tue, 10 Jan 2023 10:23:59 +0000 (11:23 +0100)
commit27d2bce1a1a0aae0b69f390a673afbb85bf68b42
tree7037eef97f83e8b1360a18ba6c447afcf4a22198tree
parentcfcb7df9dcb1c90c163b3318e7b09abfb72f26f5commit | diff
flow: complete stats for app_layer protocol counters

In the case of a gap, or in the case of a flow where one side
is recognized, but the other is not before the end, we still
increase the counters to have consistency between

jq 'select(.event_type=="flow" and .app_proto=="ftp") | .app_proto'  log/eve.json | wc -l
jq 'select(.event_type=="stats") | .stats."app_layer".flow.ftp' log/eve.json

Ticket: #5769
src/app-layer.c diff | blob | blame | history
Mirror of https://github.com/OISF/suricata.git