fix: correctly assign the subtype value in flow for drop reason

Signed-off-by: Anubhab Majumdar <[email protected]>

pkg/utils/flow_utils.go

@@ -266,10 +266,6 @@ func AddDropReason(f *flow.Flow, meta *RetinaMetadata, dropReason uint32) {
 	meta.DropReason = DropReason(dropReason)
 
 	f.Verdict = flow.Verdict_DROPPED
-	f.EventType = &flow.CiliumEventType{
-		Type:    int32(api.MessageTypeDrop),
-		SubType: int32(api.TraceToNetwork), // This is a drop event and direction is determined later.
-	}
 
 	// Set the drop reason.
 	// Retina drop reasons are different from the drop reasons available in flow library.
@@ -285,6 +281,11 @@ func AddDropReason(f *flow.Flow, meta *RetinaMetadata, dropReason uint32) {
 	default:
 		f.DropReasonDesc = flow.DropReason_DROP_REASON_UNKNOWN
 	}
+
+	f.EventType = &flow.CiliumEventType{
+		Type:    int32(api.MessageTypeDrop),
+		SubType: int32(f.GetDropReasonDesc()), // This is the drop reason.
+	}
 }
 
 func DropReasonDescription(f *flow.Flow) string {

pkg/utils/utils_linux_test.go

@@ -158,6 +158,7 @@ func TestAddDropReason(t *testing.T) {
 			assert.Equal(t, f.DropReasonDesc, tc.expectedDesc)
 			assert.Equal(t, f.Verdict, flow.Verdict_DROPPED)
 			assert.NotNil(t, f.EventType.Type, 1)
+			assert.EqualValues(t, f.EventType.GetSubType(), int32(tc.expectedDesc))
 			assert.NotNil(t, DropReasonDescription(f), DropReason_name[int32(tc.dropReason)])
 		})
 	}