Verdict
~~~~~~~
-An object containning info on the final action that will be applied to a given
+An object containing info on the final action that will be applied to a given
packet, based on all the signatures triggered by it and other possible events
(e.g., a flow drop). For that reason, it is possible for an alert with
an action ``allowed`` to have a verdict ``drop``, in IPS mode, for instance, if
* "hw_type": network link protocol type
* "proto_type": internetwork protocol for which the request is intended
-* "opcode": operation that the sender is performing (e.g. request, response)
+* "opcode": operation that the sender is performing (e.g. request, response)
* "src_mac": source MAC address
* "src_ip": source IP address
* "dest_mac": destination MAC address
The output can be enabled per instance of the EVE logger.
The ``community-id`` option is boolean. If set to ``true`` it is enabled.
-The ``community-id-seed`` option specifies a unsigned 16 bit value that
-is used a seed to the hash that is calculated for the ``community-id``
+The ``community-id-seed`` option specifies an unsigned 16 bit value that
+is used to seed the hash that is calculated for the ``community-id``
output. This must be set to the same value on all tools that output this
record.