From: Victor Julien <victor@inliniac.net>
Date: Wed, 15 Jan 2014 15:17:15 +0000 (+0100)
Subject: log-filestore: tag truncated files as such
X-Git-Tag: suricata-2.0rc1~125
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=3e33ab4f835d0bdeab3f66f2f868c46b232c5ce4;p=thirdparty%2Fsuricata.git

log-filestore: tag truncated files as such

Tag truncated files as truncated in the same way log-file does.
---

diff --git a/src/log-filestore.c b/src/log-filestore.c
index 12e56143ca..0d18d5be3b 100644
--- a/src/log-filestore.c
+++ b/src/log-filestore.c
@@ -365,11 +365,12 @@ static TmEcode LogFilestoreLogWrap(ThreadVars *tv, Packet *p, void *data, Packet
 
                 if (file_trunc && ff->state < FILE_STATE_CLOSED)
                     ff->state = FILE_STATE_TRUNCATED;
+                if (file_close && ff->state < FILE_STATE_CLOSED)
+                    ff->state = FILE_STATE_TRUNCATED;
 
                 if (ff->state == FILE_STATE_CLOSED ||
                     ff->state == FILE_STATE_TRUNCATED ||
-                    ff->state == FILE_STATE_ERROR ||
-                    (file_close == 1 && ff->state < FILE_STATE_CLOSED))
+                    ff->state == FILE_STATE_ERROR)
                 {
                     if (ffd->next == NULL) {
                         LogFilestoreLogCloseMetaFile(ff);