Project

General

Profile

Actions
Copy link

Feature #7844

open

websocket: add option to log payloads in Eve websocket events

Added by A. IOOSS 5 days ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Currently `SCWebSocketLoggerLog` hardcodes `pp` and `pb64` as `false`.
An user can only dumps websocket payloads with an alert (setting `websocket-payload: yes`).

An option could be added in `suricata.yaml`, such as `outputs.1.eve-log.types.9.websocket.payload` to let the user configure if they want to have the websocket payload included in the websocket Eve event.

No data to display

Actions
Copy link

Also available in: Atom PDF