Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bug #904: store tx_id with alerts, update XFF -- v1.1 #577

Closed
wants to merge 3 commits into from
Closed

Bug #904: store tx_id with alerts, update XFF -- v1.1 #577

wants to merge 3 commits into from

Commits on Oct 4, 2013

  1. Store TX id with alerts 

    When generating an alert and storing it in the packet, store the tx_id
as well. This way the output modules can log the tx_id and access the
proper tx for logging.

Issue #904.
    @victorjulien
    victorjulien committed Oct 4, 2013
    Configuration menu
    Copy the full SHA
    a683e5a View commit details
    Browse the repository at this point in the history

  2. Display TX id in alert debuglog.

    @victorjulien
    victorjulien committed Oct 4, 2013
    Configuration menu
    Copy the full SHA
    1fcaba1 View commit details
    Browse the repository at this point in the history

  3. XFF: use per alert tx id 

    Use the tx id stored for each alert to find the correct XFF address
to add to the extra-data field.

In overwrite mode we still only grab the first available XFF addr,
as this address is set in the header preceeding the individual alerts.

Issue #904.
    @victorjulien
    victorjulien committed Oct 4, 2013
    Configuration menu
    Copy the full SHA
    b07b0bd View commit details
    Browse the repository at this point in the history