Suricata

The depth in the pixel_format object is logged twice.

Example:

{"timestamp":"2012-02-07T16:24:03.242692+0000","flow_id":2007681413815191,"pcap_cnt":13,"event_type":"rfb","src_ip":"192.168.1.123","src_port":58048,"dest_ip":"192.168.1.10","dest_port":5900,"proto":"TCP","pkt_src":"wire/pcap","community_id":"1:d6qHVLyvWEl4kfHAZiDmEtDyb2I=","rfb":{"server_protocol_version":{"major":"003","minor":"003"},"client_protocol_version":{"major":"003","minor":"003"},"authentication":{"security_type":2,"vnc":{"challenge":"263cd2330c2902a68c88aae131ba552c","response":"3f0526502c716d0ed6a7de026af40c5a"},"security_result":"OK"},"screen_shared":false,"framebuffer":{"width":800,"height":600,"name":"\\xa0","pixel_format":{"bits_per_pixel":32,"depth":24,"big_endian":false,"true_color":true,"red_max":255,"green_max":255,"blue_max":255,"red_shift":16,"green_shift":8,"blue_shift":0,"depth":24}}}}