How to add syslog domain
[email protected] Wed, 12 Sep 2018 10:37:35 +0300
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <[email protected]> |
Hİ,
Snort syslog and csv log saving.I want to save host url.How to add domain url to syslog and csv log ?
snort version 2.9.11.1
output commands :
output alert_syslog: LOG_LOCAL5 log_alert
output alert_csv: /var/log/snort/csv.log default
syslog.log :
Sep 11 13:33:29 snort snort[5852]: [1:10000103:4] facebook {TCP} 192.168.1.5:50062 -> 31.13.84.4:443
csv.log :
09/11-13:33:30.620054 ,1,10000103,4,"facebook",TCP,31.13.84.4,443,192.168.1.5,50061,,,,***A****,0xD3C4A933,0x9A38EA4C,,0x83,84,0,6477,1450,174100,,,,
Thanks in advance for answers
_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-devel
Please visit http://blog.snort.org for the latest news about Snort!