From 18fe05fd47996b500e45b36eab12cd3061d89845 Mon Sep 17 00:00:00 2001
From: Claire Wang <claire@tailscale.com>
Date: Thu, 28 Mar 2024 14:26:56 -0400
Subject: [PATCH] wip

---
 wgengine/netlog/logger.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/wgengine/netlog/logger.go b/wgengine/netlog/logger.go
index 94f321f97..4233125a9 100644
--- a/wgengine/netlog/logger.go
+++ b/wgengine/netlog/logger.go
@@ -178,8 +178,8 @@ func recordStatistics(logger *logtail.Logger, nodeID tailcfg.StableNodeID, start
 		case srcWithinSubnet || dstWithinSubnet:
 			m.SubnetTraffic = append(m.SubnetTraffic, netlogtype.ConnectionCounts{Connection: conn, Counts: cnts})
 		default:
-			const anonymize = false
-			if anonymize {
+			const anonymize = true
+			if anonymize && !enableExitDstFlowLogs {
 				// Only preserve the address if it is a Tailscale IP address.
 				srcOrig, dstOrig := conn.Src, conn.Dst
 				conn = netlogtype.Connection{} // scrub everything by default