Describe new unified2-alert "payload" option

11 years ago · dcbbda505f
parent 53bfcf64b7
commit dcbbda505f
1 changed files with 4 additions and 0 deletions
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@ -175,6 +175,10 @@ outputs:
      # Sensor ID field of unified2 alerts.
      #sensor-id: 0
      # Include payload of packets related to alerts. Defaults to true, set to
      # false if payload is not required.
      #payload: yes
      # HTTP X-Forwarded-For support by adding the unified2 extra header or
      # overwriting the source or destination IP address (depending on flow
      # direction) with the one reported in the X-Forwarded-For HTTP header.