From: Victor Julien Date: Thu, 28 Sep 2023 12:41:20 +0000 (+0200) Subject: eve/stream: add sb main region size; segment count X-Git-Tag: suricata-8.0.0-beta1~1919 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0ab32be355e41779eee1b3e32420c284a5f20317;p=thirdparty%2Fsuricata.git eve/stream: add sb main region size; segment count Gives more detail about memory use. --- diff --git a/src/output-eve-stream.c b/src/output-eve-stream.c index 919505dce7..51296c657a 100644 --- a/src/output-eve-stream.c +++ b/src/output-eve-stream.c @@ -259,6 +259,11 @@ void EveAddFlowTcpFlags(const TcpSession *ssn, const char *name, JsonBuilder *jb jb_close(jb); } +static void LogStreamSB(const StreamingBuffer *sb, JsonBuilder *js) +{ + jb_set_uint(js, "sb_region_size", sb->region.buf_size); +} + static void LogStream(const TcpStream *stream, JsonBuilder *js) { jb_set_uint(js, "isn", stream->isn); @@ -273,6 +278,15 @@ static void LogStream(const TcpStream *stream, JsonBuilder *js) jb_set_uint(js, "wscale", stream->wscale); EveAddFlowTcpStreamFlags(stream, "flags", js); + + TcpSegment *s; + uint32_t segs = 0; + RB_FOREACH(s, TCPSEG, (struct TCPSEG *)&stream->seg_tree) + { + segs++; + } + jb_set_uint(js, "seg_cnt", segs); + LogStreamSB(&stream->sb, js); } /**