Project

General

Profile

Actions

Feature #5262

open

run.py: should tell which fields are mismatching

Added by Shivani Bhardwaj about 1 year ago. Updated 12 months ago.

Status:
Assigned
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:
Python

Description

Something like

Sub task 1
----------
        email.to[0]: <recipient@example.com>
        event_type: smtp
        pcap_cnt: 89                                 <---- Mismatch
        proto: TCP 
        smtp.helo: client-1016363.example.int
        tx_id: 0

would be nice since it'll help us see which fields exactly to look at unless the entire event is missing.

Idea proposed by: Victor Julien

Actions #1

Updated by Shivani Bhardwaj about 1 year ago

  • Description updated (diff)
Actions #2

Updated by Victor Julien 12 months ago

  • Assignee changed from Community Ticket to Shivani Bhardwaj
Actions

Also available in: Atom PDF