mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
10919e1835
The mDNS EVE logger previously logged every transaction unconditionally, with a TODO noting that request/response-only flags would be useful (mirroring the existing eve-log.dns logger). This resolves that TODO by adding "requests" and "responses" configuration keys to eve-log.mdns. Both default to enabled, preserving the current behavior of logging all mDNS traffic. Setting either to "no" skips the corresponding transactions before allocating the JSON builder, avoiding wasted work. Also documents the new options in suricata.yaml.in and the EVE JSON output section of the user guide. |
4 months ago | |
|---|---|---|
| .. | ||
| eve-json-examplesjq.rst | ||
| eve-json-format.rst | 5 months ago | |
| eve-json-output.rst | 4 months ago | |
| index.rst | 6 years ago | |