Commit graph

19 commits

Author SHA1 Message Date
lucaderi
d395deac4e Automated commit of clang-format CI changes. 2023-04-07 14:20:44 +00:00
Luca Deri
78a757b84e Updated (C) 2023-02-19 19:16:07 +01:00
Alfredo Cardigliano
dff1a44a38 Use socket client IP when it is not available from the log line 2020-04-14 14:18:10 +00:00
Alfredo Cardigliano
a254a3ad6b Support for Enterprise L license 2020-04-02 11:02:56 +00:00
Alfredo Cardigliano
935de7e392 Support for host:producer mapping in syslog module 2020-04-01 16:45:37 +00:00
Alfredo Cardigliano
dfb8a587bb Reworked syslog parsing to support all log formats, removed producer hint as parameter 2020-04-01 15:43:11 +00:00
emanuele-f
61ab06fcd7 Fix SyslogParserInterface plugins loading 2020-03-26 14:47:51 +01:00
Alfredo Cardigliano
fd95883958 The syslog interface not accepts a hint for the log producer name (syslog://<name>@<ip>:<port>) 2020-03-25 14:58:29 +00:00
Alfredo Cardigliano
76759a7d03 Suricata events are now processed by the Lua script 2019-10-10 15:56:53 +02:00
Alfredo Cardigliano
e05f9aa4f4 Syslog events are not handled by scripts in scripts/callbacks/syslog/ with the application name as file name 2019-10-09 13:00:04 +02:00
Alfredo Cardigliano
1f3c824814 Stub lua script for syslog events (alerts from Suricata) 2019-10-09 11:06:48 +02:00
Alfredo Cardigliano
919f0a2ea9 Importing TLS metadata from Suricata 2019-10-05 12:57:29 +02:00
Alfredo Cardigliano
c34ffc65ed Importing DNS metadata from Suricata 2019-10-05 12:47:11 +02:00
Alfredo Cardigliano
256fec9283 Importing http metadata from Suricata 2019-10-05 12:15:16 +02:00
Simone Mainardi
ab92ee7926 Converts ZMQ PODs to classes 2019-05-10 19:32:34 +02:00
Alfredo Cardigliano
d9efcc49cb Suricata 'netflow' support (disabled 'flow' support) 2019-04-04 17:25:42 +02:00
Alfredo Cardigliano
7ce1150a69 IDS flow alerts notification 2019-04-04 16:03:48 +02:00
Alfredo Cardigliano
3c3d581b93 Parsing Suricata alerts, minor improvements 2019-04-03 17:04:32 +02:00
Alfredo Cardigliano
61a8ce9a76 Implemented SyslogCollectorInterface/SyslogParserInterface
Implemented TCP-based syslog collector (multi producer)
Initial Suricata EVE events parsing (basic flows)
Reworked ZMQ CollectorInterface/Parser interface hierarchy
2019-04-02 18:32:52 +02:00