[Discussion] Problem with output of unified2 for banayard2
Miler Alberto Garcia Villanueva
phl4kx at gmail.com
Tue May 25 22:22:44 UTC 2010
Hi all, recently I have a problem with the output of unified2 when
banyard2 read the unified2.alert.* files, the problem is that
barnyard2 can read the unified2.alert.* files of suricata log but
cant identify what is the classification, the alert output is like
this in barnyard:
<bridge0> ET SCAN NMAP -sS window 4096 [**] [Classification ID:
(null)] [Priority ID: 3]
Classification ID: null and priority of 3,
The output of alert and fast.log of suricata identify correctly the
classification,
I contact with developers of banyard2 and say me that maybe is a
problem with the log (unified2.alert.* files) generated by suricata
Thanks a lot
Miler
More information about the Discussion
mailing list