Feature Request - Add reverse search options #224

Closed
jthoel opened this Issue Oct 10, 2012 · 0 comments

Comments

Projects
None yet
2 participants
@jthoel

jthoel commented Oct 10, 2012

When looking at an event, when you click on the IP for the source or destination, you can then do a 'Basic Lookup' or 'Search Snorby by SRC/Dest'.

It would be nice to have the option to look at that IP for either the Source OR the Destination, both options, instead of just the Source for the source address and destination for the Dest address. And on that note, having an option for any alert for that IP (source or destination combined) would be groovy.

To find out if a client IP has been a destination target from a webserver, for example.

@mephux mephux closed this May 5, 2013

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment