Skip to content

Instantly share code, notes, and snippets.

@jouellnyc
Last active August 13, 2020 04:04
Show Gist options
  • Save jouellnyc/ea6eb67616b37dd95202420739756d5b to your computer and use it in GitHub Desktop.
Save jouellnyc/ea6eb67616b37dd95202420739756d5b to your computer and use it in GitHub Desktop.
Show all unique destination ports in Suricata's eve.json log
#cd /var/log/suricata
#cat eve.json | jq -r '.dest_port' | sort | uniq -c | sort -nr | head
436 53
410 443
215 null
193 80
28 22
22 5353
15 1900
6 5228
6 39702
5 55496
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment