From: Victor Julien <victor@inliniac.net>
Date: Tue, 12 Feb 2019 14:30:15 +0000 (+0100)
Subject: flow: log gap state per direction
X-Git-Tag: suricata-5.0.0-beta1~214
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f98b5ecd6a1792076fd0fa5b45fd2fa637fd0748;p=thirdparty%2Fsuricata.git

flow: log gap state per direction
---

diff --git a/src/output-json-flow.c b/src/output-json-flow.c
index 0eb31145c0..e59f7c8698 100644
--- a/src/output-json-flow.c
+++ b/src/output-json-flow.c
@@ -346,6 +346,10 @@ static void JsonFlowLogJSON(JsonFlowLogThread *aft, json_t *js, Flow *f)
                     break;
             }
             json_object_set_new(tjs, "state", json_string(tcp_state));
+            if (ssn->client.flags & STREAMTCP_STREAM_FLAG_GAP)
+                json_object_set_new(tjs, "gap_ts", json_true());
+            if (ssn->server.flags & STREAMTCP_STREAM_FLAG_GAP)
+                json_object_set_new(tjs, "gap_tc", json_true());
         }
 
         json_object_set_new(js, "tcp", tjs);