suricata

Commit Graph

Author	SHA1	Message	Date
Eric Leblond	da9005c404	output-json-alert: add app_proto or flow to events This patch adds a partial flow entry in the alert event (if applayer or flow is selected) or simply app_proto if it is not. app_proto is useful as filter and aggregation field. And the partial flow entry contains more information about the proto as well as some volumetry info.	8 years ago
Jason Ish	1b4ba4496c	logging: rename registration functions to not have tmm As the logging modules are no longer threading modules, rename them so they don't look like they are being registered as threading modules. Also, move the registration to the output.c which will handle registration of the loggers.	9 years ago
Victor Julien	3c7af02067	flow-json-log: stub Stub for JSON flow logger.	11 years ago

Author

SHA1

Message

Date

Eric Leblond

da9005c404

output-json-alert: add app_proto or flow to events

This patch adds a partial flow entry in the alert event
(if applayer or flow is selected) or simply app_proto if
it is not.

app_proto is useful as filter and aggregation field. And
the partial flow entry contains more information about the
proto as well as some volumetry info.

Jason Ish

1b4ba4496c

logging: rename registration functions to not have tmm

As the logging modules are no longer threading modules, rename
them so they don't look like they are being registered as
threading modules.

Also, move the registration to the output.c which will handle
registration of the loggers.

Victor Julien

3c7af02067

flow-json-log: stub

Stub for JSON flow logger.

3 Commits (12c350f77d3c7a1a7d57d1abb76ea4f3584bce45)