From: Arne Welzel <arne.welzel@corelight.com>
Date: Tue, 20 Feb 2024 11:50:40 +0000 (+0100)
Subject: schema: Add stats.capture and in_iface properties
X-Git-Tag: suricata-7.0.5~25
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ba46f2ff3e298fa1d930c77f44991b670284841c;p=thirdparty%2Fsuricata.git

schema: Add stats.capture and in_iface properties

New suricata-verify test listens on loopback interface, resulting
in the capture and in_iface fields in the stats and event objects.

(cherry picked from commit f9cf87a003d273ec175590e2ffec053d2672af95)
---

diff --git a/etc/schema.json b/etc/schema.json
index e01c6828c3..960de2136f 100644
--- a/etc/schema.json
+++ b/etc/schema.json
@@ -51,6 +51,9 @@
         "icmp_type": {
             "type": "integer"
         },
+        "in_iface": {
+            "type": "string"
+        },
         "log_level": {
             "type": "string"
         },
@@ -3697,6 +3700,20 @@
                 "uptime": {
                     "type": "integer"
                 },
+                "capture": {
+                    "type": "object",
+                    "properties": {
+                        "kernel_packets": {
+                            "type": "integer"
+                        },
+                        "kernel_drops": {
+                            "type": "integer"
+                        },
+                        "kernel_ifdrops": {
+                            "type": "integer"
+                        }
+                    }
+                },
                 "memcap_pressure": {
                     "type": "integer"
                 },