Re: How to add syslog domain

Hello Yunus,

I don't understand your problem, do you want to add a domain full url in CSV logs?

Regards

Ozgur

12.09.2018, 10:38, "[email protected]" <[email protected]>:

Hİ,

Snort syslog and csv log saving.I want to save host url.How to add domain url to syslog and csv log ?

snort version 2.9.11.1

output commands :

output alert_syslog: LOG_LOCAL5 log_alert

output alert_csv: /var/log/snort/csv.log default

syslog.log :

Sep 11 13:33:29 snort snort[5852]: [1:10000103:4] facebook {TCP} 192.168.1.5:50062 -> 31.13.84.4:443

csv.log :

09/11-13:33:30.620054 ,1,10000103,4,"facebook",TCP,31.13.84.4,443,192.168.1.5,50061,,,,***A****,0xD3C4A933,0x9A38EA4C,,0x83,84,0,6477,1450,174100,,,,

Thanks in advance for answer

_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!