From 0e22e95e4766e25f7bbff5b852d5c96b1d4a09f0 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Tue, 19 May 2015 15:54:41 +0200 Subject: [PATCH] alert-json: fix stream logging for IPS mode Switch direction in IPS mode. --- src/output-json-alert.c | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/src/output-json-alert.c b/src/output-json-alert.c index f9783b28af..973c657f03 100644 --- a/src/output-json-alert.c +++ b/src/output-json-alert.c @@ -267,10 +267,18 @@ static int AlertJson(ThreadVars *tv, JsonAlertLogThread *aft, const Packet *p) MemBufferReset(payload); - if (p->flowflags & FLOW_PKT_TOSERVER) { - flag = FLOW_PKT_TOCLIENT; + if (!EngineModeIsIPS()) { + if (p->flowflags & FLOW_PKT_TOSERVER) { + flag = FLOW_PKT_TOCLIENT; + } else { + flag = FLOW_PKT_TOSERVER; + } } else { - flag = FLOW_PKT_TOSERVER; + if (p->flowflags & FLOW_PKT_TOSERVER) { + flag = FLOW_PKT_TOSERVER; + } else { + flag = FLOW_PKT_TOCLIENT; + } } StreamSegmentForEach((const Packet *)p, flag, -- 2.47.2