promisechen / suricata

suricata源码分析和读书笔记

suricata

suricata源码分析和读书笔记

suricata's Issues

httplog

(gdb) bt
#0  LogHttpLogIPWrapper (tv=0x7fff987fa010, data=0x7fff842ed870, p=0x7fff8426ff00, f=0x4317500, htp_state=0x7fff843028e0, tx=0x7fff84302c80, tx_id=0, ipproto=2) at log-httplog.c:504
#1  0x00000000005a897a in LogHttpLogger (tv=0x7fff987fa010, thread_data=0x7fff842ed870, p=0x7fff8426ff00, f=0x4317500, state=0x7fff843028e0, tx=0x7fff84302c80, tx_id=0) at log-httplog.c:521
#2  0x00000000005c6850 in OutputTxLog (tv=0x7fff987fa010, p=0x7fff8426ff00, thread_data=0x7fff842ed850) at output-tx.c:238
#3  0x00000000005bcd51 in OutputLoggerLog (tv=0x7fff987fa010, p=0x7fff8426ff00, thread_data=0x7fff842ed7f0) at output.c:927
#4  0x0000000000599265 in FlowWorker (tv=0x7fff987fa010, p=0x7fff8426ff00, data=0x7fff84273850, preq=0x52af340, unused=0x0) at flow-worker.c:248
#5  0x000000000061415c in TmThreadsSlotVarRun (tv=0x7fff987fa010, p=0x7fff8426ff00, slot=0x52af1c0) at tm-threads.c:130
#6  0x000000000068488e in TmThreadsSlotProcessPkt (tv=0x7fff987fa010, s=0x52af1c0, p=0x7fff8426ff00) at tm-threads.h:149
#7  0x0000000000691b94 in ReceiveDpdkLoop (tv=0x7fff987fa010, data=0x7fff842708c0, slot=0x52af080) at falcon-source-dpdkintel.c:303
#8  0x00000000006149ab in TmThreadsSlotPktAcqLoop (td=0x7fff987fa010) at tm-threads.c:334
#9  0x00007ffff5c1fe25 in start_thread () from /lib64/libpthread.so.0
#10 0x00007ffff572d34d in clone () from /lib64/libc.so.6

+    HtpTxUserData *htud = (HtpTxUserData *)htp_tx_get_user_data(tx);
+    if (htud == NULL) {
+        SCLogDebug("no htud");
+
+    }
+    HtpBodyPrint(&htud->response_body);
+

请问suricata日志是什么时候写盘呢？这部分代码该如何找到