From: Eric Leblond <el@stamus-networks.com>
Date: Sun, 25 Sep 2022 17:56:47 +0000 (+0200)
Subject: eve/schema: update following flow changes
X-Git-Tag: suricata-7.0.0-beta1~105
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=27cdfec28af72f0fdb9f5280231b3cac8dd066e6;p=thirdparty%2Fsuricata.git

eve/schema: update following flow changes
---

diff --git a/etc/schema.json b/etc/schema.json
index b974cfbdc1..2161f8b82f 100644
--- a/etc/schema.json
+++ b/etc/schema.json
@@ -100,6 +100,10 @@
             "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d+[+\\-]\\d+$",
             "optional": false
         },
+        "direction": {
+            "type": "string",
+            "optional": true
+        },
         "tx_id": {
             "type": "integer",
             "optional": true
@@ -1324,6 +1328,12 @@
                 "bytes_toserver": {
                     "type": "integer"
                 },
+                "dest_ip": {
+                    "type": "string"
+                },
+                "dest_port": {
+                    "type": "integer"
+                },
                 "end": {
                     "type": "string"
                 },
@@ -1336,6 +1346,12 @@
                 "reason": {
                     "type": "string"
                 },
+                "src_ip": {
+                    "type": "string"
+                },
+                "src_port": {
+                    "type": "integer"
+                },
                 "start": {
                     "type": "string"
                 },
@@ -5043,6 +5059,9 @@
                 "syn": {
                     "type": "boolean"
                 },
+                "tc_gap": {
+                    "type": "boolean"
+                },
                 "tcp_flags": {
                     "type": "string"
                 },
@@ -5052,6 +5071,9 @@
                 "tcp_flags_ts": {
                     "type": "string"
                 },
+                "ts_gap": {
+                    "type": "boolean"
+                },
                 "urg": {
                     "type": "boolean"
                 }