Project

General

Profile

Actions
Copy link

Feature #4982

open

Feature #4174: tracking: app-layer frame inspection support

Feature #4988: frames: logging improvements

frames: selective frame logging

Added by Victor Julien almost 3 years ago. Updated 6 months ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Logging all the frames is likely only useful for developments and rule writers for small pcaps. But it could be interesting to enable a subset of frames for logging.

There could be 2 ways, that we should probably explore both:

  • global config
  • rule based: e.g. config keyword to enable logging somehow on a per flow or per frame basis?
Actions
Copy link

Also available in: Atom PDF