From: Jason Ish <ish@unx.ca>
Date: Tue, 27 Sep 2016 15:07:10 +0000 (-0600)
Subject: tls-json: make tls events direction sensitive
X-Git-Tag: suricata-3.2beta1~274
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=44c846f2f8558094344344142d04e71d72b7466c;p=thirdparty%2Fsuricata.git

tls-json: make tls events direction sensitive

Previously the src/dest ips in TLS events would differ between
IDS and IPS modes. Make the header creation direction sensitive
so they are identical in both modes.
---

diff --git a/src/output-json-tls.c b/src/output-json-tls.c
index 34a12158e8..f1accdde32 100644
--- a/src/output-json-tls.c
+++ b/src/output-json-tls.c
@@ -160,7 +160,7 @@ static int JsonTlsLogger(ThreadVars *tv, void *thread_data, const Packet *p,
             ssl_state->server_connp.cert0_subject == NULL)
         return 0;
 
-    json_t *js = CreateJSONHeader((Packet *)p, 0, "tls");
+    json_t *js = CreateJSONHeader((Packet *)p, 1, "tls");
     if (unlikely(js == NULL))
         return 0;