suricata ids
March 22, 2023 · View on GitHub
Expression
product = suricata ids
Fields
There are no fields for this extension.
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| alert-trigger | bytes_in | ||||
| rule | |||||
| interface | |||||
| src_ip | Legacy | ✓ | ✓ | ||
| result | |||||
| protocol | Legacy | ✓ | |||
| bytes_to_client | |||||
| pkts_toserver | |||||
| event_code | |||||
| alert_id | Legacy | ✓ | |||
| action | Legacy | ✓ | |||
| threat_type | |||||
| app_protocol | |||||
| dest_port | Legacy | ✓ | |||
| payload_printable | |||||
| failure_reason | |||||
| pkts_toclient | |||||
| bytes_to_server | |||||
| rule_id | |||||
| src_port | Legacy | ✓ | |||
| bytes_out | |||||
| additional_info | |||||
| dest_ip | Legacy | ✓ | ✓ | ||
| event_name | |||||
| category |