Re: URL logs
Alexander Kushnarev <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <AM6PR0502MB39280F3BAC64BFF44A539407F5D20@AM6PR0502MB3928.eurprd05.prod.outlook.com> |
Also for some reasons I don't get any http traffic in the log even thou I should've have at least or two logs of browsing to different websites Get Outlook for Android<https://aka.ms/ghei36> ________________________________ From: [email protected] <[email protected]> on behalf of Alexander Kushnarev <[email protected]> Sent: Tuesday, August 13, 2019 10:18:15 PM To: Justin Azoff <[email protected]> Cc: [email protected] <[email protected]> Subject: Re: [Zeek] URL logs Is there a way to make the two combine into one field? Get Outlook for Android<https://aka.ms/ghei36> ________________________________ From: Justin Azoff <[email protected]> Sent: Tuesday, August 13, 2019 10:12:34 PM To: Alexander Kushnarev <[email protected]> Cc: [email protected] <[email protected]> Subject: Re: [Zeek] URL logs http. the full url is a combination of host and uri columns. On Tue, Aug 13, 2019 at 3:05 PM Alexander Kushnarev <[email protected]<mailto:[email protected]>> wrote: Hi Team Can you please advice which of the logs contain the full urls to which I have accessed ? All of the logs that I’ve gone thru contains only the domain and not the full request with the url. Any help will be appreciated. Alex. _______________________________________________ Zeek mailing list [email protected]<mailto:[email protected]> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek -- Justin _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek