[Oisf-users] suricata vlan log - onionsecurity is ok, selks ko

john nesh john.nesh76 at gmail.com
Thu Feb 26 19:18:33 UTC 2015


I am facing a different behaviour regarding vlans in logs.
I made an installation of securityonion and vlan worked log in eve.json
worked flawlessy but not in selks.
I have read that vlan behaviour had changed in 2.1

in my suricata.yaml I have:

   use-for-tracking: true

But I have no log in eve.json.
Is this an expected behaviour?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20150226/ca17dfe1/attachment.html>

More information about the Oisf-users mailing list