]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
eve/flow: add vlan field
authorMark Janssen <mark@praseodym.net>
Thu, 24 Jan 2019 20:48:21 +0000 (21:48 +0100)
committerVictor Julien <victor@inliniac.net>
Tue, 23 Apr 2019 07:55:17 +0000 (09:55 +0200)
src/flow-util.c
src/flow.h
src/output-json-flow.c
src/output-json-netflow.c

index 0e254f32d7f3461a8d9fa339032e8a4645415760..0dc08a6d5722c0ad6df345d8bc2f30a4f926bff3 100644 (file)
@@ -203,4 +203,3 @@ void FlowInit(Flow *f, const Packet *p)
 
     SCReturn;
 }
-
index 3d774338da638c062afd277d4bc46a9ba051d402..aac932bf79c489b3e10ac6c2d243cbbe716aea7b 100644 (file)
@@ -627,4 +627,3 @@ uint8_t FlowGetDisruptionFlags(const Flow *f, uint8_t flags);
 void FlowHandlePacketUpdate(Flow *f, Packet *p);
 
 #endif /* __FLOW_H__ */
-
index 2cb862d087ee1400d01d67a336ce11cd3f57b70d..04e05a1c470fc5c11ac092894d5b365134e963e1 100644 (file)
@@ -121,31 +121,17 @@ static json_t *CreateJSONHeaderFromFlow(const Flow *f, const char *event_type)
     if (event_type) {
         json_object_set_new(js, "event_type", json_string(event_type));
     }
-#if 0
+
     /* vlan */
-    if (f->vlan_id[0] > 0) {
-        json_t *js_vlan;
-        switch (f->vlan_idx) {
-            case 1:
-                json_object_set_new(js, "vlan",
-                                    json_integer(f->vlan_id[0]));
-                break;
-            case 2:
-                js_vlan = json_array();
-                if (unlikely(js != NULL)) {
-                    json_array_append_new(js_vlan,
-                                    json_integer(VLAN_GET_ID1(p)));
-                    json_array_append_new(js_vlan,
-                                    json_integer(VLAN_GET_ID2(p)));
-                    json_object_set_new(js, "vlan", js_vlan);
-                }
-                break;
-            default:
-                /* shouldn't get here */
-                break;
+    if (f->vlan_idx > 0) {
+        json_t *js_vlan = json_array();
+        json_array_append_new(js_vlan, json_integer(f->vlan_id[0]));
+        if (f->vlan_idx > 1) {
+            json_array_append_new(js_vlan, json_integer(f->vlan_id[1]));
         }
+        json_object_set_new(js, "vlan", js_vlan);
     }
-#endif
+
     /* tuple */
     json_object_set_new(js, "src_ip", json_string(srcip));
     switch(f->proto) {
index ef86c3abe359cfbae76f77289df0befd3495bd0b..e00029943f908bd088ed4b6ba5c181dfa25c8e86 100644 (file)
@@ -129,31 +129,17 @@ static json_t *CreateJSONHeaderFromFlow(const Flow *f, const char *event_type, i
     if (event_type) {
         json_object_set_new(js, "event_type", json_string(event_type));
     }
-#if 0
+
     /* vlan */
-    if (f->vlan_id[0] > 0) {
-        json_t *js_vlan;
-        switch (f->vlan_idx) {
-            case 1:
-                json_object_set_new(js, "vlan",
-                                    json_integer(f->vlan_id[0]));
-                break;
-            case 2:
-                js_vlan = json_array();
-                if (unlikely(js != NULL)) {
-                    json_array_append_new(js_vlan,
-                                    json_integer(VLAN_GET_ID1(p)));
-                    json_array_append_new(js_vlan,
-                                    json_integer(VLAN_GET_ID2(p)));
-                    json_object_set_new(js, "vlan", js_vlan);
-                }
-                break;
-            default:
-                /* shouldn't get here */
-                break;
+    if (f->vlan_idx > 0) {
+        json_t *js_vlan = json_array();
+        json_array_append_new(js_vlan, json_integer(f->vlan_id[0]));
+        if (f->vlan_idx > 1) {
+            json_array_append_new(js_vlan, json_integer(f->vlan_id[1]));
         }
+        json_object_set_new(js, "vlan", js_vlan);
     }
-#endif
+
     /* tuple */
     json_object_set_new(js, "src_ip", json_string(srcip));
     switch(f->proto) {