Parse ndpi confidence from suricata

This commit is contained in:
Alfredo Cardigliano 2024-11-06 12:22:21 +01:00
parent 3d87347f4c
commit 57fb25a60d
2 changed files with 7 additions and 0 deletions

View file

@ -93,6 +93,11 @@ local function parsenDPIMetadata(event_ndpi, flow)
else
flow.app_protocol = tonumber(event_ndpi.proto_id)
end
if event_ndpi.confidence then
for id, label in pairs(event_ndpi.confidence) do
flow.confidence = tonumber(id)
end
end
end
end