]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
smtp: log transaction even if no email present 6765/head
authorJason Ish <jason.ish@oisf.net>
Wed, 10 Nov 2021 22:38:35 +0000 (16:38 -0600)
committerShivani Bhardwaj <shivanib134@gmail.com>
Tue, 11 Jan 2022 15:43:04 +0000 (21:13 +0530)
The SMTP transaction logger was not writing the log if the email
portion of the logger failed, such as in the case of STARTTLS
where this is no email decoded.

Ticket #4817

(cherry picked from commit 52b9c12f41d890cda340fe3b1c7e7e3e9d673d73)

src/output-json-smtp.c

index 606394d64ff7b1f69729820c79161680d46c048c..e331b01023abbab5eda11b1062f0803afaf071af 100644 (file)
@@ -88,9 +88,8 @@ static int JsonSmtpLogger(ThreadVars *tv, void *thread_data, const Packet *p, Fl
     EveSmtpDataLogger(f, state, tx, tx_id, jb);
     jb_close(jb);
 
-    if (EveEmailLogJson(jhl, jb, p, f, state, tx, tx_id) == TM_ECODE_OK) {
-        OutputJsonBuilderBuffer(jb, jhl->file_ctx, &jhl->buffer);
-    }
+    EveEmailLogJson(jhl, jb, p, f, state, tx, tx_id);
+    OutputJsonBuilderBuffer(jb, jhl->file_ctx, &jhl->buffer);
 
     jb_free(jb);