detect/analyzer: add more details for flow_age

Ticket: OISF#6312
AkakiAlice · Oct 22, 2024 · 4a1f9a3 · 4a1f9a3
1 parent 30806ce
commit 4a1f9a3
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/rust/src/detect/tojson/mod.rs b/rust/src/detect/tojson/mod.rs
@@ -77,3 +77,10 @@ pub unsafe extern "C" fn SCDetectU16ToJson(
 ) -> bool {
     return detect_uint_to_json(js, du).is_ok();
 }
+
+#[no_mangle]
+pub unsafe extern "C" fn SCDetectU32ToJson(
+    js: &mut JsonBuilder, du: &DetectUintData<u32>,
+) -> bool {
+    return detect_uint_to_json(js, du).is_ok();
+}
diff --git a/src/detect-engine-analyzer.c b/src/detect-engine-analyzer.c
@@ -932,6 +932,13 @@ static void DumpMatches(RuleAnalyzer *ctx, JsonBuilder *js, const SigMatchData *
                 jb_close(js);
                 break;
             }
+            case DETECT_FLOW_AGE: {
+                const DetectU32Data *cd = (const DetectU32Data *)smd->ctx;
+                jb_open_object(js, "flow_age");
+                SCDetectU32ToJson(js, cd);
+                jb_close(js);
+                break;
+            }
         }
         jb_close(js);