]> git.ipfire.org Git - thirdparty/suricata.git/commit
Adding XFF support to EVE alert output
authorDuarte Silva <development@serializing.me>
Fri, 5 Dec 2014 15:40:58 +0000 (15:40 +0000)
committerVictor Julien <victor@inliniac.net>
Tue, 16 Dec 2014 10:27:34 +0000 (11:27 +0100)
commit4e04cd2d1be85cbd41c34ea922302121d05d55c9
tree421e5ca7388ceb7cc3383c8bfc540ed9f10edfa7
parent0bdf494b544cbc45bbc571ceefe83f750c9b3ef7
Adding XFF support to EVE alert output
- Created app-layer-htp-xff.c and app-layer-htp-xff.h
- Added entries in the Makefile.am
- Added the necessary configuration options to EVE alert section
- Updated Unified2 XFF configuration comments and removed unnecessary whitespace
- Created a generic function to parse the configuration
- Release the flow locks sooner and remove debug logging
- Added XFF support to EVE alert output
src/Makefile.am
src/alert-unified2-alert.c
src/app-layer-htp-xff.c [new file with mode: 0644]
src/app-layer-htp-xff.h [new file with mode: 0644]
src/output-json-alert.c
suricata.yaml.in