From 431dc155aa8cfec8df96b7caa5140e26ab27fa25 Mon Sep 17 00:00:00 2001 From: Eric Leblond Date: Mon, 4 May 2015 18:14:03 +0200 Subject: [PATCH] email-json: delete white space from "from" The From field is handled separatly and it could also starts by white spaces. --- src/output-json-email-common.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/output-json-email-common.c b/src/output-json-email-common.c index 533ce17ade..ecbd273a2f 100644 --- a/src/output-json-email-common.c +++ b/src/output-json-email-common.c @@ -240,7 +240,8 @@ json_t *JsonEmailLogJsonData(const Flow *f, void *state, void *vtx, uint64_t tx_ (size_t)field->value_len); if (likely(s != NULL)) { //printf("From: \"%s\"\n", s); - json_object_set_new(sjs, "from", json_string(s)); + char * sp = SkipWhiteSpaceTill(s, s + strlen(s)); + json_object_set_new(sjs, "from", json_string(sp)); SCFree(s); } }