detect/analyzer: add more details for flow_age

Ticket: #6312

diff --git a/rust/src/detect/tojson/mod.rs b/rust/src/detect/tojson/mod.rs
index 2c552bcfa0bcb6a026d2225aea2d828252179ca7..1a1f0cee80281705b69deb446b738f655751a81d 100644 (file)
--- a/rust/src/detect/tojson/mod.rs
+++ b/rust/src/detect/tojson/mod.rs
@@ -77,3 +77,10 @@ pub unsafe extern "C" fn SCDetectU16ToJson(
 ) -> bool {
     return detect_uint_to_json(js, du).is_ok();
 }
+
+#[no_mangle]
+pub unsafe extern "C" fn SCDetectU32ToJson(
+    js: &mut JsonBuilder, du: &DetectUintData<u32>,
+) -> bool {
+    return detect_uint_to_json(js, du).is_ok();
+}
\ No newline at end of file

diff --git a/src/detect-engine-analyzer.c b/src/detect-engine-analyzer.c
index 3d4d8991a32d69e541f45d13535129783cdb49c1..dcf3ce60a6a30f0adb717bcca549d4a281259fc4 100644 (file)
--- a/src/detect-engine-analyzer.c
+++ b/src/detect-engine-analyzer.c
@@ -932,6 +932,13 @@ static void DumpMatches(RuleAnalyzer *ctx, JsonBuilder *js, const SigMatchData *
                 jb_close(js);
                 break;
             }
+            case DETECT_FLOW_AGE: {
+                const DetectU32Data *cd = (const DetectU32Data *)smd->ctx;
+                jb_open_object(js, "flow_age");
+                SCDetectU32ToJson(js, cd);
+                jb_close(js);
+                break;
+            }
         }
         jb_close(js);