Project

General

Profile

Actions
Copy link

Feature #384

closed

Add support for logging alert packets in libpcap format

Added by David Wharton almost 13 years ago. Updated over 12 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:

Description

This is a feature request to add support to be able to log packets that trigger an alert in libpcap format. This should also include logging of packets that occur as the result of 'tag' directives.

Actions
Copy link
 #1

Updated by Victor Julien almost 13 years ago

We're trying to limit the outputs Suricata has itself and offload to Barnyard2 if feasible. I think barnyard2 does well at producing the output you seek.

Actions
Copy link
 #2

Updated by Victor Julien over 12 years ago

  • Status changed from New to Closed
  • Priority changed from High to Normal
Actions
Copy link

Also available in: Atom PDF