Project

General

Profile

Actions

Feature #5262

open

run.py: should tell which fields are mismatching

Added by Shivani Bhardwaj 6 months ago. Updated 3 months ago.

Status:
Assigned
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:
Python

Description

Something like

Sub task 1
----------
        email.to[0]: <recipient@example.com>
        event_type: smtp
        pcap_cnt: 89                                 <---- Mismatch
        proto: TCP 
        smtp.helo: client-1016363.example.int
        tx_id: 0

would be nice since it'll help us see which fields exactly to look at unless the entire event is missing.

Idea proposed by: Victor Julien

Actions

Also available in: Atom PDF