diff --git a/src/tsg_rule.cpp b/src/tsg_rule.cpp index 3966f53..fcef971 100644 --- a/src/tsg_rule.cpp +++ b/src/tsg_rule.cpp @@ -2265,6 +2265,16 @@ size_t tsg_scan_string(const struct streaminfo *a_stream, struct maat *feather, int is_hited=maat_scan_string(feather, g_tsg_maat_rt_para.scan_tb[idx].id, s_data, s_data_len, matched_rules, MAX_RESULT_NUM, &n_matched_rules, s_mid); if(is_hited==MAAT_SCAN_HIT) { + MESA_handle_runtime_log(g_tsg_maat_rt_para.logger, + RLOG_LV_DEBUG, + "SCAN_STRING", + "Hit: %s len: %lu scan ret: %d table_name: %s addr: %s, mid: %p", + s_data, + s_data_len, + is_hited, + g_tsg_maat_rt_para.scan_tb[idx].name, + PRINTADDR(a_stream, g_tsg_maat_rt_para.level), + s_mid); return matche_rules_convert(feather, matched_rules, n_matched_rules, results, n_results); }