Skip to content

Instantly share code, notes, and snippets.

@jasonish
Created August 23, 2016 15:50
Show Gist options
  • Save jasonish/efa5f204ef7e46326d472271d204f107 to your computer and use it in GitHub Desktop.
Save jasonish/efa5f204ef7e46326d472271d204f107 to your computer and use it in GitHub Desktop.
Example packet records.
{
"timestamp": "2016-07-28T11:07:26.425683-0600",
"flow_id": 1684414306,
"pcap_cnt": 4,
"event_type": "alert",
"src_ip": "10.16.1.11",
"src_port": 34662,
"dest_ip": "10.16.1.1",
"dest_port": 5555,
"proto": "TCP",
"alert": {
"action": "allowed",
"gid": 1,
"signature_id": 1,
"rev": 1,
"signature": "MY TEST RULE",
"category": "",
"severity": 3
}
}
{
"timestamp": "2016-07-28T11:07:26.425970-0600",
"flow_id": 1684414306,
"pcap_cnt": 5,
"event_type": "packet",
"src_ip": "10.16.1.1",
"src_port": 5555,
"dest_ip": "10.16.1.11",
"dest_port": 34662,
"proto": "TCP",
"packet": "2MuK7aFGABUXDQb3CABFAAA05/pAAEAGPJ4KEAEBChABCxWzh2ZmuFqFGkObUIAQAOOHrwAAAQEICh5gyrUeYLye"
}
{
"timestamp": "2016-07-28T11:07:32.793303-0600",
"flow_id": 1684414306,
"pcap_cnt": 6,
"event_type": "packet",
"src_ip": "10.16.1.11",
"src_port": 34662,
"dest_ip": "10.16.1.1",
"dest_port": 5555,
"proto": "TCP",
"packet": "ABUXDQb32MuK7aFGCABFAABdNCxAAEAG8EMKEAELChABAYdmFbMaQ5tQZrhahYAYAOUWewAAAQEICh5g1X0eYMq1MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OQo="
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment