From: Arne Welzel <arne.welzel@corelight.com>
Date: Tue, 20 Feb 2024 11:50:40 +0000 (+0100)
Subject: schema: Add stats.capture and in_iface properties
X-Git-Tag: suricata-8.0.0-beta1~1667
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F10590%2Fhead;p=thirdparty%2Fsuricata.git

schema: Add stats.capture and in_iface properties

New suricata-verify test listens on loopback interface, resulting
in the capture and in_iface fields in the stats and event objects.
---

diff --git a/etc/schema.json b/etc/schema.json
index 981610b250..4924f5982b 100644
--- a/etc/schema.json
+++ b/etc/schema.json
@@ -51,6 +51,9 @@
         "icmp_type": {
             "type": "integer"
         },
+        "in_iface": {
+            "type": "string"
+        },
         "log_level": {
             "type": "string"
         },
@@ -3715,6 +3718,20 @@
                     "description": "Suricata engine's uptime",
                     "type": "integer"
                 },
+                "capture": {
+                    "type": "object",
+                    "properties": {
+                        "kernel_packets": {
+                            "type": "integer"
+                        },
+                        "kernel_drops": {
+                            "type": "integer"
+                        },
+                        "kernel_ifdrops": {
+                            "type": "integer"
+                        }
+                    }
+                },
                 "memcap_pressure": {
                     "description": "Percentage of memcaps used by flow, stream, stream-reassembly and app-layer-http",
                     "type": "integer"