Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

output/alert: rewrite code for app-layer properties #9034

Closed

Conversation

catenacyber
Copy link
Contributor

Link to redmine ticket:
None, preliminary work for https://redmine.openinfosecfoundation.org/issues/5053 and app-layer plugins
Part of #8961 with rebase

Describe changes:

  • Fix setup-app-layer script so that it adds app-layer metadata to alerts

After that, there is still from #8961

  • addition of protocols missing alert metadata (like krb5) + behavioral change for dns alert metadata
  • reusing these SimpleTxLogFunc from a JsonGenericLogger to remove many C files

Modifies #9005 by making logger functions opening the object + reusing HTTP2 logger for file output

Especially fix setup-app-layer script to not forget this part
as is done for http2 events and alerts.
The http.version integer can help to determine if this is HTTP2
@suricata-qa
Copy link

Information: QA ran without warnings.

Pipeline 14682

@suricata-qa
Copy link

WARNING:

field baseline test %
SURI_TLPR1_stats_chk
.flow.memuse 521438120 576099552 110.48%

Pipeline 14718

@catenacyber
Copy link
Contributor Author

Replaced by #9053

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

3 participants