diff --git a/src/source-nfq.c b/src/source-nfq.c index 23167adfc0..50fe1ec99a 100644 --- a/src/source-nfq.c +++ b/src/source-nfq.c @@ -545,8 +545,9 @@ void ReceiveNFQThreadExitStats(ThreadVars *tv, void *data) { void VerdictNFQThreadExitStats(ThreadVars *tv, void *data) { NFQThreadVars *ntv = (NFQThreadVars *)data; #ifdef COUNTERS - SCLogInfo("(%s) Pkts accepted %" PRIu32 ", dropped %" PRIu32 "", - tv->name, ntv->accepted, ntv->dropped); + SCLogInfo("(%s) Pkts accepted %" PRIu32 ", dropped %" PRIu32 + ", replaced %" PRIu32, tv->name, ntv->accepted, + ntv->dropped, ntv->replaced); #endif } @@ -575,6 +576,9 @@ void NFQSetVerdict(NFQThreadVars *t, Packet *p) { SCMutexLock(&t->mutex_qh); if (p->flags & PKT_STREAM_MODIFIED) { ret = nfq_set_verdict(t->qh, p->nfq_v.id, verdict, GET_PKT_LEN(p), GET_PKT_DATA(p)); +#ifdef COUNTERS + t->replaced++; +#endif /* COUNTERS */ } else { ret = nfq_set_verdict(t->qh, p->nfq_v.id, verdict, 0, NULL); } diff --git a/src/source-nfq.h b/src/source-nfq.h index 34b7f37e8a..ed1bdc76c6 100644 --- a/src/source-nfq.h +++ b/src/source-nfq.h @@ -75,6 +75,7 @@ typedef struct NFQThreadVars_ uint32_t errs; uint32_t accepted; uint32_t dropped; + uint32_t replaced; ThreadVars *tv; } NFQThreadVars;