Project

General

Profile

Actions

Feature #473

open

pcap log: alert log with packet indexes

Added by Victor Julien over 9 years ago. Updated over 2 years ago.

Status:
New
Priority:
Normal
Target version:
Effort:
medium
Difficulty:
medium
Label:

Description

A log similar to alert-pcapinfo that lists alerts for the pcap files we write out.

The pcap-log module keeps track of a per pcap file packet index, so when we get an alert, we can log the packet number the alert was generated for.

Should log: sid,gid,rev,5tuple,packet number.

Actions #1

Updated by Jason Ish over 3 years ago

  • Effort set to medium
  • Difficulty set to medium
Actions #2

Updated by Andreas Herz over 2 years ago

  • Assignee set to Community Ticket
Actions

Also available in: Atom PDF