Skip to content
This repository was archived by the owner on Jul 10, 2025. It is now read-only.

Added support for new event type (v3)#74

Merged
jasonish merged 1 commit intojasonish:masterfrom
ArthanJans:master
Nov 29, 2021
Merged

Added support for new event type (v3)#74
jasonish merged 1 commit intojasonish:masterfrom
ArthanJans:master

Conversation

@ArthanJans
Copy link

Fixes #72

@jasonish
Copy link
Owner

Do you have a sample of this log file we can include for tests?

@ArthanJans
Copy link
Author

u2logs.zip
Here are some sample log files for testing. Be warned that I have not checked that they are exhaustive and there may be some things that remain untested

@csbflyer
Copy link

Is there a plan to merge this patch? Does it fix parsing latest snort event types? I don't see them listed here: https://idstools.readthedocs.io/en/latest/_modules/idstools/unified2.html

@jasonish jasonish merged commit cfb7131 into jasonish:master Nov 29, 2021
@jasonish
Copy link
Owner

Merged. Note that I didn't test against new unified2 files, but review and unit tests show it shouldn't break existing support.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Recent versions of Snort unified2 not supported.

3 participants