Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added support for new event type (v3) #74

Merged
merged 1 commit into from
Nov 29, 2021
Merged

Conversation

ArthanJans
Copy link

Fixes #72

idstools/unified2.py Outdated Show resolved Hide resolved
@jasonish
Copy link
Owner

Do you have a sample of this log file we can include for tests?

@ArthanJans
Copy link
Author

u2logs.zip
Here are some sample log files for testing. Be warned that I have not checked that they are exhaustive and there may be some things that remain untested

@csbflyer
Copy link

Is there a plan to merge this patch? Does it fix parsing latest snort event types? I don't see them listed here: https://idstools.readthedocs.io/en/latest/_modules/idstools/unified2.html

@jasonish jasonish merged commit cfb7131 into jasonish:master Nov 29, 2021
@jasonish
Copy link
Owner

Merged. Note that I didn't test against new unified2 files, but review and unit tests show it shouldn't break existing support.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Recent versions of Snort unified2 not supported.
3 participants