[Oisf-users] ICMP in Flow log

[Victor Julien]

On 07-02-18 15:22, Joseph Feather wrote:
> The issue we have is we are not seeing any ICMP data the flow logs.  We
> have tpc, udp, IPV6-ICMP, and SCTP.  Is there an option in the yaml that
> I am missing, is it a part of another log, or is it a bug?

Known issue that we'll hopefully address in 4.1:

https://redmine.openinfosecfoundation.org/issues/2292

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------