Actions
Feature #5262
openrun.py: should tell which fields are mismatching
Effort:
Difficulty:
Label:
Python
Description
Something like
Sub task 1
----------
email.to[0]: <recipient@example.com>
event_type: smtp
pcap_cnt: 89 <---- Mismatch
proto: TCP
smtp.helo: client-1016363.example.int
tx_id: 0
would be nice since it'll help us see which fields exactly to look at unless the entire event is missing.
Idea proposed by: Victor Julien
Actions