Skip to content

Commit

Permalink
detect/analyzer: add more details for the tcp ack keyword
Browse files Browse the repository at this point in the history
Issue: #6354

Added the DETECT_ACK case to detect-engine-analyzer.c
  • Loading branch information
0xEniola committed Oct 12, 2023
1 parent 1a132f4 commit b7849c2
Showing 1 changed file with 9 additions and 0 deletions.
9 changes: 9 additions & 0 deletions src/detect-engine-analyzer.c
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,7 @@
#include "util-time.h"
#include "util-validate.h"
#include "util-conf.h"
#include "detect-tcp-ack.h"

static int rule_warnings_only = 0;

Expand Down Expand Up @@ -861,6 +862,14 @@ static void DumpMatches(RuleAnalyzer *ctx, JsonBuilder *js, const SigMatchData *
jb_close(js);
break;
}
case DETECT_ACK: {
const DetectAckData *cd = (const DetectAckData *)smd->ctx;

jb_open_object(js, "ack");
jb_set_uint(js, "ack", cd->ack);
jb_close(js);
break;
}
}
jb_close(js);

Expand Down

0 comments on commit b7849c2

Please sign in to comment.