schema: Add stats.capture and in_iface properties

New suricata-verify test listens on loopback interface, resulting in the capture and in_iface fields in the stats and event objects.
OISF · Mar 7, 2024 · f9cf87a · f9cf87a
1 parent f172041
commit f9cf87a
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/etc/schema.json b/etc/schema.json
@@ -51,6 +51,9 @@
         "icmp_type": {
             "type": "integer"
         },
+        "in_iface": {
+            "type": "string"
+        },
         "log_level": {
             "type": "string"
         },
@@ -3715,6 +3718,20 @@
                     "description": "Suricata engine's uptime",
                     "type": "integer"
                 },
+                "capture": {
+                    "type": "object",
+                    "properties": {
+                        "kernel_packets": {
+                            "type": "integer"
+                        },
+                        "kernel_drops": {
+                            "type": "integer"
+                        },
+                        "kernel_ifdrops": {
+                            "type": "integer"
+                        }
+                    }
+                },
                 "memcap_pressure": {
                     "description": "Percentage of memcaps used by flow, stream, stream-reassembly and app-layer-http",
                     "type": "integer"