From: Victor Julien Date: Tue, 25 Feb 2014 10:45:10 +0000 (+0100) Subject: log-pcap: multi mode yaml parsing X-Git-Tag: suricata-2.1beta1~105 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bbc8c1ea05fd73a85ddf70869861db09e26c4129;p=thirdparty%2Fsuricata.git log-pcap: multi mode yaml parsing In preparation of the multi file mode, add 'multi' as a value to the mode. --- diff --git a/src/log-pcap.c b/src/log-pcap.c index 4d55d01e5a..54b59e0e09 100644 --- a/src/log-pcap.c +++ b/src/log-pcap.c @@ -60,6 +60,7 @@ #define LOGMODE_NORMAL 0 #define LOGMODE_SGUIL 1 +#define LOGMODE_MULTI 2 #define RING_BUFFER_MODE_DISABLED 0 #define RING_BUFFER_MODE_ENABLED 1 @@ -514,6 +515,8 @@ static OutputCtx *PcapLogInitCtx(ConfNode *conf) if (s_mode != NULL) { if (strcasecmp(s_mode, "sguil") == 0) { pl->mode = LOGMODE_SGUIL; + } else if (strcasecmp(s_mode, "multi") == 0) { + pl->mode = LOGMODE_MULTI; } else if (strcasecmp(s_mode, "normal") != 0) { SCLogError(SC_ERR_INVALID_ARGUMENT, "log-pcap you must specify \"sguil\" or \"normal\" mode "