alert-json: fix stream logging for IPS mode

Switch direction in IPS mode.

diff --git a/src/output-json-alert.c b/src/output-json-alert.c
index f9783b28af29c471d2115d62620e203a64165c19..973c657f038fb0ed6b1fa8957420c0fc98b9ae3c 100644 (file)
--- a/src/output-json-alert.c
+++ b/src/output-json-alert.c
@@ -267,10 +267,18 @@ static int AlertJson(ThreadVars *tv, JsonAlertLogThread *aft, const Packet *p)
 
                 MemBufferReset(payload);
 
-                if (p->flowflags & FLOW_PKT_TOSERVER) {
-                    flag = FLOW_PKT_TOCLIENT;
+                if (!EngineModeIsIPS()) {
+                    if (p->flowflags & FLOW_PKT_TOSERVER) {
+                        flag = FLOW_PKT_TOCLIENT;
+                    } else {
+                        flag = FLOW_PKT_TOSERVER;
+                    }
                 } else {
-                    flag = FLOW_PKT_TOSERVER;
+                    if (p->flowflags & FLOW_PKT_TOSERVER) {
+                        flag = FLOW_PKT_TOSERVER;
+                    } else {
+                        flag = FLOW_PKT_TOCLIENT;
+                    }
                 }
 
                 StreamSegmentForEach((const Packet *)p, flag,