]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
output-json-tls: added SNI field to extended output
authorMats Klepsland <mats.klepsland@gmail.com>
Tue, 13 Oct 2015 12:44:06 +0000 (14:44 +0200)
committerVictor Julien <victor@inliniac.net>
Mon, 23 Nov 2015 09:37:17 +0000 (10:37 +0100)
Added SNI field to extended JSON output.

src/output-json-tls.c

index 4cbd21aec6d65f76ebebe12b7ab788035a9a6233..d8b8078f976bcd67187fc7dc28e895ed07ab0131 100644 (file)
@@ -92,6 +92,12 @@ void JsonTlsLogJSONExtended(json_t *tjs, SSLState * state)
     json_object_set_new(tjs, "fingerprint",
                         json_string(state->server_connp.cert0_fingerprint));
 
+    /* tls.sni */
+    if (state->client_connp.sni) {
+        json_object_set_new(tjs, "sni",
+                            json_string(state->client_connp.sni));
+    }
+
     /* tls.version */
     switch (state->server_connp.version) {
         case TLS_VERSION_UNKNOWN: