looking for snort 3.0 appid_stats.log & alert_json.text sample files
Noah Dietrich <[email protected]> Thu, 14 Nov 2019 20:06:59 +0200
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <CA+N0JExwxW+Wk91aUb9Jawp3MSBeVbGjW55PRtLFbyyGLG0nXg@mail.gmail.com> |
--===============5954135864879614460== Content-Type: multipart/alternative; boundary="000000000000a375ac05975259d4" --000000000000a375ac05975259d4 Content-Type: text/plain; charset="UTF-8" hello, I am working on some Splunk dashboards for Snort, and i am hoping that the snort community has some sample files they can send me so i have a broad range of events to work with. I am specifically looking for appid_stats.log files (generated by snort 3's OpenAppID processor), and alert_json.txt files generated on a windows system running snort 3.0 (i'll take alert_json.txt files generated on a different platform, but i do need to test Windows at some point). thank you in advance, Noah --000000000000a375ac05975259d4 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">hello,<div><br></div><div>I am working on some Splunk dash= boards for Snort, and i am hoping that the snort community has some sample = files they can send me so i have a broad range of events to work with.</div= ><div><br></div><div>I am=C2=A0specifically looking for appid_stats.log fil= es (generated by snort 3's OpenAppID processor), and alert_json.txt fil= es generated on a windows system running snort 3.0 (i'll take alert_jso= n.txt files generated on a different platform, but i do need to test Window= s at some point).</div><div><br></div><div>thank you in advance,</div><div>= <br></div><div>Noah</div><div><br></div></div> --000000000000a375ac05975259d4-- --===============5954135864879614460== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Snort-devel mailing list [email protected] https://lists.snort.org/mailman/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort! --===============5954135864879614460==--