[Oisf-users] Relating packets to alerts

Wed Mar 27 20:27:55 UTC 2019

Is it possible to identify in an eve log which of the tagged packets correspond to certain alert? I have been doing it by flow id, but many times, the flow id is related to multiple alerts
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20190327/69357819/attachment.html>