lucaderi
|
d395deac4e
|
Automated commit of clang-format CI changes.
|
2023-04-07 14:20:44 +00:00 |
|
Luca Deri
|
78a757b84e
|
Updated (C)
|
2023-02-19 19:16:07 +01:00 |
|
Alfredo Cardigliano
|
dff1a44a38
|
Use socket client IP when it is not available from the log line
|
2020-04-14 14:18:10 +00:00 |
|
Alfredo Cardigliano
|
a254a3ad6b
|
Support for Enterprise L license
|
2020-04-02 11:02:56 +00:00 |
|
Alfredo Cardigliano
|
935de7e392
|
Support for host:producer mapping in syslog module
|
2020-04-01 16:45:37 +00:00 |
|
Alfredo Cardigliano
|
dfb8a587bb
|
Reworked syslog parsing to support all log formats, removed producer hint as parameter
|
2020-04-01 15:43:11 +00:00 |
|
emanuele-f
|
61ab06fcd7
|
Fix SyslogParserInterface plugins loading
|
2020-03-26 14:47:51 +01:00 |
|
Alfredo Cardigliano
|
fd95883958
|
The syslog interface not accepts a hint for the log producer name (syslog://<name>@<ip>:<port>)
|
2020-03-25 14:58:29 +00:00 |
|
Alfredo Cardigliano
|
76759a7d03
|
Suricata events are now processed by the Lua script
|
2019-10-10 15:56:53 +02:00 |
|
Alfredo Cardigliano
|
e05f9aa4f4
|
Syslog events are not handled by scripts in scripts/callbacks/syslog/ with the application name as file name
|
2019-10-09 13:00:04 +02:00 |
|
Alfredo Cardigliano
|
1f3c824814
|
Stub lua script for syslog events (alerts from Suricata)
|
2019-10-09 11:06:48 +02:00 |
|
Alfredo Cardigliano
|
919f0a2ea9
|
Importing TLS metadata from Suricata
|
2019-10-05 12:57:29 +02:00 |
|
Alfredo Cardigliano
|
c34ffc65ed
|
Importing DNS metadata from Suricata
|
2019-10-05 12:47:11 +02:00 |
|
Alfredo Cardigliano
|
256fec9283
|
Importing http metadata from Suricata
|
2019-10-05 12:15:16 +02:00 |
|
Simone Mainardi
|
ab92ee7926
|
Converts ZMQ PODs to classes
|
2019-05-10 19:32:34 +02:00 |
|
Alfredo Cardigliano
|
d9efcc49cb
|
Suricata 'netflow' support (disabled 'flow' support)
|
2019-04-04 17:25:42 +02:00 |
|
Alfredo Cardigliano
|
7ce1150a69
|
IDS flow alerts notification
|
2019-04-04 16:03:48 +02:00 |
|
Alfredo Cardigliano
|
3c3d581b93
|
Parsing Suricata alerts, minor improvements
|
2019-04-03 17:04:32 +02:00 |
|
Alfredo Cardigliano
|
61a8ce9a76
|
Implemented SyslogCollectorInterface/SyslogParserInterface
Implemented TCP-based syslog collector (multi producer)
Initial Suricata EVE events parsing (basic flows)
Reworked ZMQ CollectorInterface/Parser interface hierarchy
|
2019-04-02 18:32:52 +02:00 |
|