From bd3bed6c31b0562fff4e3a0a5a254a13970b532f Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Sun, 14 Apr 2024 21:36:17 +0200 Subject: [PATCH] detect/analyzer: add more details for tcp_mss Issue: #6355 --- src/detect-engine-analyzer.c | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/src/detect-engine-analyzer.c b/src/detect-engine-analyzer.c index d0f7123880..5e5d29e92f 100644 --- a/src/detect-engine-analyzer.c +++ b/src/detect-engine-analyzer.c @@ -32,6 +32,7 @@ #include "detect-engine.h" #include "detect-engine-analyzer.h" #include "detect-engine-mpm.h" +#include "detect-engine-uint.h" #include "conf.h" #include "detect-content.h" #include "detect-pcre.h" @@ -915,12 +916,18 @@ static void DumpMatches(RuleAnalyzer *ctx, JsonBuilder *js, const SigMatchData * } case DETECT_SEQ: { const DetectSeqData *cd = (const DetectSeqData *)smd->ctx; - jb_open_object(js, "seq"); jb_set_uint(js, "number", cd->seq); jb_close(js); break; } + case DETECT_TCPMSS: { + const DetectU16Data *cd = (const DetectU16Data *)smd->ctx; + jb_open_object(js, "tcp_mss"); + SCDetectU16ToJson(js, cd); + jb_close(js); + break; + } } jb_close(js); -- 2.47.2