<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>Hello Mob! :)</div><div><br data-mce-bogus="1"></div><div>I was under the impression, perhaps incorrectly, that 'xbit' data gets stored in the Suricata EVE files. For example, if an 'xbit' gets 'set' or checked ('isset'), is there an EVE record of that happening? I've search by Suricata instances EVE files for 'xbits' an can't find any records of that. However, it might be that I haven't triggered any rules that have 'xbits' in them. I'd like to see how this data get recorded. </div><div><br data-mce-bogus="1"></div><div>Secondly, I know there are plans to depreciate 'unified2'. Is there a target date for this. </div><div><br>Thank you!</div><div><br data-mce-bogus="1"></div><div><br></div><div data-marker="__SIG_PRE__">- Champ Clark III<br><br></div></div></body></html>