From: Mats Klepsland <mats.klepsland@gmail.com>
Date: Tue, 13 Oct 2015 12:44:06 +0000 (+0200)
Subject: output-json-tls: added SNI field to extended output
X-Git-Tag: suricata-3.0RC1~20
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=285022fde970fa8fca1db1ff4c19c09e5b29a670;p=thirdparty%2Fsuricata.git

output-json-tls: added SNI field to extended output

Added SNI field to extended JSON output.
---

diff --git a/src/output-json-tls.c b/src/output-json-tls.c
index 4cbd21aec6..d8b8078f97 100644
--- a/src/output-json-tls.c
+++ b/src/output-json-tls.c
@@ -92,6 +92,12 @@ void JsonTlsLogJSONExtended(json_t *tjs, SSLState * state)
     json_object_set_new(tjs, "fingerprint",
                         json_string(state->server_connp.cert0_fingerprint));
 
+    /* tls.sni */
+    if (state->client_connp.sni) {
+        json_object_set_new(tjs, "sni",
+                            json_string(state->client_connp.sni));
+    }
+
     /* tls.version */
     switch (state->server_connp.version) {
         case TLS_VERSION_UNKNOWN: