Project

General

Profile

Actions

Feature #3296

open

Include in the fileinfo if it was a duplicate

Added by Andreas Herz almost 5 years ago. Updated almost 4 years ago.

Status:
Feedback
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

In filestore v2 files are stored by their sha256. When it finds a duplicate, it will only update the timestamp.

I think the request here is to log in some way the number of times this file was already seen.


Related issues 1 (1 open0 closed)

Related to Suricata - Task #3288: Suricon 2019 brainstormAssignedVictor JulienActions
Actions

Also available in: Atom PDF