looking for snort 3.0 appid_stats.log & alert_json.text sample files

Noah Dietrich <[email protected]> Thu, 14 Nov 2019 20:06:59 +0200
Newsgroups gmane.comp.security.ids.snort.devel
Message-ID <CA+N0JExwxW+Wk91aUb9Jawp3MSBeVbGjW55PRtLFbyyGLG0nXg@mail.gmail.com>
--===============5954135864879614460==
Content-Type: multipart/alternative; boundary="000000000000a375ac05975259d4"

--000000000000a375ac05975259d4
Content-Type: text/plain; charset="UTF-8"

hello,

I am working on some Splunk dashboards for Snort, and i am hoping that the
snort community has some sample files they can send me so i have a broad
range of events to work with.

I am specifically looking for appid_stats.log files (generated by snort 3's
OpenAppID processor), and alert_json.txt files generated on a windows
system running snort 3.0 (i'll take alert_json.txt files generated on a
different platform, but i do need to test Windows at some point).

thank you in advance,

Noah

--000000000000a375ac05975259d4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">hello,<div><br></div><div>I am working on some Splunk dash=
boards for Snort, and i am hoping that the snort community has some sample =
files they can send me so i have a broad range of events to work with.</div=
><div><br></div><div>I am=C2=A0specifically looking for appid_stats.log fil=
es (generated by snort 3&#39;s OpenAppID processor), and alert_json.txt fil=
es generated on a windows system running snort 3.0 (i&#39;ll take alert_jso=
n.txt files generated on a different platform, but i do need to test Window=
s at some point).</div><div><br></div><div>thank you in advance,</div><div>=
<br></div><div>Noah</div><div><br></div></div>

--000000000000a375ac05975259d4--

--===============5954135864879614460==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

--===============5954135864879614460==--