]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
tls-json: make tls events direction sensitive
authorJason Ish <ish@unx.ca>
Tue, 27 Sep 2016 15:07:10 +0000 (09:07 -0600)
committerVictor Julien <victor@inliniac.net>
Wed, 28 Sep 2016 11:03:30 +0000 (13:03 +0200)
Previously the src/dest ips in TLS events would differ between
IDS and IPS modes. Make the header creation direction sensitive
so they are identical in both modes.

src/output-json-tls.c

index 34a12158e8f8078430261b2cab79d7ddba7ce787..f1accdde32812099f533565271ecf5dc2c0dffc8 100644 (file)
@@ -160,7 +160,7 @@ static int JsonTlsLogger(ThreadVars *tv, void *thread_data, const Packet *p,
             ssl_state->server_connp.cert0_subject == NULL)
         return 0;
 
-    json_t *js = CreateJSONHeader((Packet *)p, 0, "tls");
+    json_t *js = CreateJSONHeader((Packet *)p, 1, "tls");
     if (unlikely(js == NULL))
         return 0;