eve: add pkt_src

This will tell the user if a record was generated based on a real packet,
a flow timeout packet or others.

diff --git a/src/output-json.c b/src/output-json.c
index 3ff8d1bb0e2a9dc0bc4bc0848833e4a080c91d04..b1fb4acf5be2763ed19163e50740510719a69ecf 100644 (file)
--- a/src/output-json.c
+++ b/src/output-json.c
@@ -905,6 +905,8 @@ JsonBuilder *CreateEveHeader(const Packet *p, enum OutputJsonLogDirection dir,
             break;
     }
 
+    jb_set_string(js, "pkt_src", PktSrcToString(p->pkt_src));
+
     if (eve_ctx != NULL) {
         EveAddCommonOptions(&eve_ctx->cfg, p, f, js);
     }