eve/flow: add vlan field

src/flow-util.c

@@ -203,4 +203,3 @@ void FlowInit(Flow *f, const Packet *p)
 
     SCReturn;
 }
-

src/flow.h

@@ -627,4 +627,3 @@ uint8_t FlowGetDisruptionFlags(const Flow *f, uint8_t flags);
 void FlowHandlePacketUpdate(Flow *f, Packet *p);
 
 #endif /* __FLOW_H__ */
-

src/output-json-flow.c

@@ -121,31 +121,17 @@ static json_t *CreateJSONHeaderFromFlow(const Flow *f, const char *event_type)
     if (event_type) {
         json_object_set_new(js, "event_type", json_string(event_type));
     }
-#if 0
+
     /* vlan */
-    if (f->vlan_id[0] > 0) {
+    if (f->vlan_idx > 0) {
-        json_t *js_vlan;
+        json_t *js_vlan = json_array();
-        switch (f->vlan_idx) {
+        json_array_append_new(js_vlan, json_integer(f->vlan_id[0]));
-            case 1:
+        if (f->vlan_idx > 1) {
-                json_object_set_new(js, "vlan",
+            json_array_append_new(js_vlan, json_integer(f->vlan_id[1]));
-                                    json_integer(f->vlan_id[0]));
-                break;
-            case 2:
-                js_vlan = json_array();
-                if (unlikely(js != NULL)) {
-                    json_array_append_new(js_vlan,
-                                    json_integer(VLAN_GET_ID1(p)));
-                    json_array_append_new(js_vlan,
-                                    json_integer(VLAN_GET_ID2(p)));
-                    json_object_set_new(js, "vlan", js_vlan);
-                }
-                break;
-            default:
-                /* shouldn't get here */
-                break;
         }
+        json_object_set_new(js, "vlan", js_vlan);
     }
-#endif
+
     /* tuple */
     json_object_set_new(js, "src_ip", json_string(srcip));
     switch(f->proto) {

src/output-json-netflow.c

@@ -129,31 +129,17 @@ static json_t *CreateJSONHeaderFromFlow(const Flow *f, const char *event_type, i
     if (event_type) {
         json_object_set_new(js, "event_type", json_string(event_type));
     }
-#if 0
+
     /* vlan */
-    if (f->vlan_id[0] > 0) {
+    if (f->vlan_idx > 0) {
-        json_t *js_vlan;
+        json_t *js_vlan = json_array();
-        switch (f->vlan_idx) {
+        json_array_append_new(js_vlan, json_integer(f->vlan_id[0]));
-            case 1:
+        if (f->vlan_idx > 1) {
-                json_object_set_new(js, "vlan",
+            json_array_append_new(js_vlan, json_integer(f->vlan_id[1]));
-                                    json_integer(f->vlan_id[0]));
-                break;
-            case 2:
-                js_vlan = json_array();
-                if (unlikely(js != NULL)) {
-                    json_array_append_new(js_vlan,
-                                    json_integer(VLAN_GET_ID1(p)));
-                    json_array_append_new(js_vlan,
-                                    json_integer(VLAN_GET_ID2(p)));
-                    json_object_set_new(js, "vlan", js_vlan);
-                }
-                break;
-            default:
-                /* shouldn't get here */
-                break;
         }
+        json_object_set_new(js, "vlan", js_vlan);
     }
-#endif
+
     /* tuple */
     json_object_set_new(js, "src_ip", json_string(srcip));
     switch(f->proto) {