Skip to content

Commit

Permalink
detect/analyzer: add more details for the tcp ack keyword
Browse files Browse the repository at this point in the history
Issue: 6354
Added the DETECT_ACK case to detect-engine-analyzer.c
  • Loading branch information
0xEniola committed Jan 27, 2024
1 parent c3b3c11 commit 83c7f92
Showing 1 changed file with 9 additions and 0 deletions.
9 changes: 9 additions & 0 deletions src/detect-engine-analyzer.c
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,7 @@
#include "detect-bytetest.h"
#include "detect-flow.h"
#include "detect-tcp-flags.h"
#include "detect-tcp-ack.h"
#include "detect-ipopts.h"
#include "feature.h"
#include "util-print.h"
Expand Down Expand Up @@ -903,6 +904,14 @@ static void DumpMatches(RuleAnalyzer *ctx, JsonBuilder *js, const SigMatchData *
jb_close(js); // object
break;
}
case DETECT_ACK: {
const DetectAckData *cd = (const DetectAckData *)smd->ctx;

jb_open_object(js, "ack");
jb_set_uint(js, "number", cd->ack);
jb_close(js);
break;
}
}
jb_close(js);

Expand Down

0 comments on commit 83c7f92

Please sign in to comment.