From: Eric Leblond <eric@regit.org>
Date: Mon, 4 May 2015 16:14:03 +0000 (+0200)
Subject: email-json: delete white space from "from"
X-Git-Tag: suricata-3.0RC1~110
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=431dc155aa8cfec8df96b7caa5140e26ab27fa25;p=thirdparty%2Fsuricata.git

email-json: delete white space from "from"

The From field is handled separatly and it could also starts by
white spaces.
---

diff --git a/src/output-json-email-common.c b/src/output-json-email-common.c
index 533ce17ade..ecbd273a2f 100644
--- a/src/output-json-email-common.c
+++ b/src/output-json-email-common.c
@@ -240,7 +240,8 @@ json_t *JsonEmailLogJsonData(const Flow *f, void *state, void *vtx, uint64_t tx_
                                         (size_t)field->value_len);
                 if (likely(s != NULL)) {
                     //printf("From: \"%s\"\n", s);
-                    json_object_set_new(sjs, "from", json_string(s));
+                    char * sp = SkipWhiteSpaceTill(s, s + strlen(s));
+                    json_object_set_new(sjs, "from", json_string(sp));
                     SCFree(s);
                 }
             }