Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

output/eve: add 'verdict' field to 'alert' and 'drop' events - v9 #9216

Closed
wants to merge 6 commits into from
Closed

output/eve: add 'verdict' field to 'alert' and 'drop' events - v9 #9216

wants to merge 6 commits into from

Commits on Jul 11, 2023

  1. userguide/eve: add section about drop event type

    @jufajardini
    jufajardini committed Jul 11, 2023
    Configuration menu
    Copy the full SHA
    5d31f86 View commit details
    Browse the repository at this point in the history

  2. misc: fix typos & update copyright years

    @jufajardini
    jufajardini committed Jul 11, 2023
    Configuration menu
    Copy the full SHA
    048f8fd View commit details
    Browse the repository at this point in the history

Commits on Jul 12, 2023

  1. output/alert: add verdict field 

    Related to
Bug OISF#5464
    @jufajardini
    jufajardini committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    d0cce2b View commit details
    Browse the repository at this point in the history

  2. output/drop: add verdict field 

    Related to
Bug OISF#5464
    @jufajardini
    jufajardini committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    b0c5bba View commit details
    Browse the repository at this point in the history

  3. userguide/eve: format and reorganize alert section 

    The `field action` portion seemed to be comprised of a more generic
section that followed it. Also formatted the section for lines to be
within the character limit.
    @jufajardini
    jufajardini committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    5825647 View commit details
    Browse the repository at this point in the history

  4. detect/alert: flag packets with PASS action 

    If packet->action is never set to 'pass', we won't know if a packet had
a 'pass' verdict.

Related to
Bug OISF#5464
    @jufajardini
    jufajardini committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    40d30ed View commit details
    Browse the repository at this point in the history