From dc61464135bbdaed79c8ea7076f070320430bc45 Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Sun, 9 Aug 2020 22:58:35 +0200 Subject: [PATCH] moved PACKET_EVENT_PAYLOAD_FLOW after FLOW_EVENT_NEW (and before FLOW_EVENT_END/IDLE) Signed-off-by: Toni Uhlig --- nDPId.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/nDPId.c b/nDPId.c index a4e488688..9dd482489 100644 --- a/nDPId.c +++ b/nDPId.c @@ -1558,8 +1558,6 @@ static void ndpi_process_packet(uint8_t * const args, flow_to_process->min_l4_data_len = l4_len; } - jsonize_packet_event(reader_thread, header, packet, flow_to_process, PACKET_EVENT_PAYLOAD_FLOW); - if (is_new_flow != 0) { flow_to_process->max_l4_data_len = l4_len; @@ -1567,6 +1565,8 @@ static void ndpi_process_packet(uint8_t * const args, jsonize_flow_event(reader_thread, flow_to_process, FLOW_EVENT_NEW); } + jsonize_packet_event(reader_thread, header, packet, flow_to_process, PACKET_EVENT_PAYLOAD_FLOW); + /* TCP-FIN: indicates that at least one side wants to end the connection */ if (flow.flow_fin_ack_seen != 0 && flow_to_process->flow_fin_ack_seen == 0) {