eve/netflow: only log response record if we've seen response pkts

src/output-json-netflow.c

@@ -321,6 +321,8 @@ static int JsonNetFlowLogger(ThreadVars *tv, void *thread_data, Flow *f)
     json_object_clear(js);
     json_decref(js);
 
+    /* only log a response record if we actually have seen response packets */
+    if (f->tosrcpktcnt) {
         /* reset */
         MemBufferReset(jhl->buffer);
         js = CreateJSONHeaderFromFlow(f, "netflow", 1);
@@ -334,7 +336,7 @@ static int JsonNetFlowLogger(ThreadVars *tv, void *thread_data, Flow *f)
         json_object_del(js, "netflow");
         json_object_clear(js);
         json_decref(js);
-
+    }
     SCReturnInt(TM_ECODE_OK);
 }