Project

General

Profile

Actions
Copy link

Task #7784

open

detect: list app-layer-event keywords

Added by Jason Ish 10 days ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Some EVE fields map to app-layer-event keywords, but there is no way to list app-layer-event keywords, for example: app-layer-event:mdns.name_too_long.

So while I would like to map some EVE entries to this keyword, doing some results in an error as eve-parity.py can't verify that this keyword exists.

No data to display

Actions
Copy link

Also available in: Atom PDF