eve/stream: ack unseen data

3 years ago · 37e694b5b8
parent b7739bfdba
commit 37e694b5b8
1 changed files with 2 additions and 0 deletions
--- a/src/output-eve-stream.c
+++ b/src/output-eve-stream.c
@ -346,6 +346,8 @@ static int EveStreamLogger(ThreadVars *tv, void *thread_data, const Packet *p)
            jb_append_string(js, "dup_ack");
        if (p->tcpvars.stream_pkt_flags & STREAM_PKT_FLAG_DSACK)
            jb_append_string(js, "dsack");
+        if (p->tcpvars.stream_pkt_flags & STREAM_PKT_FLAG_ACK_UNSEEN_DATA)
+            jb_append_string(js, "ack_unseen_data");
        jb_close(js);
    }
    jb_close(js);