Snort mailing list archives
Filename in alert_CSV
From: "Parker, Jonathan E." <jep () g-c-i net>
Date: Thu, 13 Jun 2013 20:24:44 +0000
I am processing multiple .pcap files using the --pcap-dir option, and have my snort.conf setup to put alerts in a csv file using alert_CSV. After processing with Snort I load the results into a MySQL database. I want to include the filename of the pertinent .pcap for each alert, but there does not seem to be an option for that for the csv output module. Can anyone suggest a way to do this? Thanks in advance - Jon
------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Filename in alert_CSV Parker, Jonathan E. (Jun 13)
- Re: Filename in alert_CSV waldo kitty (Jun 15)