1
0
Fork 0

Adding upstream version 1.34.4.

Signed-off-by: Daniel Baumann <daniel@debian.org>
This commit is contained in:
Daniel Baumann 2025-05-24 07:26:29 +02:00
parent e393c3af3f
commit 4978089aab
Signed by: daniel
GPG key ID: FBB4F0E80A80222F
4963 changed files with 677545 additions and 0 deletions

File diff suppressed because one or more lines are too long

View file

@ -0,0 +1,21 @@
{
"timestamp": "2021-06-08T06:34:49.237367+0000",
"event_type": "stats",
"stats": {
"threads": {
"W#01-ens2f1": {
"detect": {
"engines": [
{
"id": 0,
"last_reload": "2021-06-08T06:33:05.084872+0000",
"rules_loaded": 22712,
"rules_failed": 0
}
],
"alert": 0
}
}
}
}
}

View file

@ -0,0 +1 @@
{"timestamp":"2021-05-30T20:07:13.208777+0200","flow_id":1696236471136137,"in_iface":"s1-suricata","event_type":"alert","src_ip":"10.0.0.5","src_port":18715,"dest_ip":"179.60.192.3","dest_port":80,"proto":"TCP","alert":{"action":"allowed","gid":1,"source":{"ip":"10.0.0.5","port":18715},"target":{"ip":"179.60.192.3","port":80},"signature_id":6,"rev":0,"signature":"Corrupted HTTP body","severity": 3,"category":"Misc activity","severity":3},"flow":{"pkts_toserver":1,"pkts_toclient":0,"bytes_toserver":174,"bytes_toclient":0,"start":"2021-05-30T20:07:13.208777+0200"}}

View file

@ -0,0 +1,35 @@
{
"timestamp": "2021-05-30T20:07:13.208777+0200",
"flow_id": 1696236471136137,
"in_iface": "s1-suricata",
"event_type": "alert",
"src_ip": "10.0.0.5",
"src_port": 18715,
"dest_ip": "179.60.192.3",
"dest_port": 80,
"proto": "TCP",
"alert": {
"action": "allowed",
"gid": 1,
"source": {
"ip": "10.0.0.5",
"port": 18715
},
"target": {
"ip": "179.60.192.3",
"port": 80
},
"signature_id": 6,
"rev": 0,
"signature": "Corrupted HTTP body",
"severity": 3,
"category": "Misc activity"
},
"flow": {
"pkts_toserver": 1,
"pkts_toclient": 0,
"bytes_toserver": 174,
"bytes_toclient": 0,
"start": "2021-05-30T20:07:13.208777+0200"
}
}

View file

@ -0,0 +1,18 @@
{
"timestamp": "2023-04-07T00:20:57.995497+0800",
"flow_id": 2150129093506313,
"in_iface": "eth1",
"event_type": "dns",
"src_ip": "192.168.0.100",
"src_port": 39262,
"dest_ip": "192.168.0.1",
"dest_port": 53,
"proto": "UDP",
"dns": {
"type": "query",
"id": 7145,
"rrname": "reddit.com",
"rrtype": "A",
"tx_id": 10
}
}

View file

@ -0,0 +1,29 @@
{
"timestamp": "2023-04-07T00:21:01.318245+0800",
"flow_id": 180225164834117,
"in_iface": "eth1",
"event_type": "drop",
"src_ip": "192.168.0.110",
"src_port": 46016,
"dest_ip": "54.192.18.125",
"dest_port": 443,
"proto": "TCP",
"drop": {
"len": 76,
"tos": 0,
"ttl": 64,
"ipid": 62316,
"tcpseq": 3900248957,
"tcpack": 2339873683,
"tcpwin": 501,
"syn": false,
"ack": true,
"psh": true,
"rst": false,
"urg": false,
"fin": true,
"tcpres": 0,
"tcpurgp": 0,
"reason": "stream error"
}
}

View file

@ -0,0 +1,21 @@
{
"timestamp": "2023-04-07T00:28:22.136079+0800",
"flow_id": 911610881873910,
"in_iface": "eth1",
"event_type": "flow",
"src_ip": "192.168.0.121",
"src_port": 50212,
"dest_ip": "142.251.130.3",
"dest_port": 443,
"proto": "TCP",
"flow": {
"age": 0,
"state": "new",
"alerted": false
},
"tcp": {
"tcp_flags": "00",
"tcp_flags_ts": "00",
"tcp_flags_tc": "00"
}
}

View file

@ -0,0 +1,22 @@
{
"timestamp": "2023-04-07T00:27:50.220224+0800",
"flow_id": 1124332026121723,
"in_iface": "eth2",
"event_type": "http",
"src_ip": "192.168.0.120",
"src_port": 33950,
"dest_ip": "203.205.239.179",
"dest_port": 80,
"proto": "TCP",
"tx_id": 0,
"http": {
"hostname": "hkminorshort.weixin.qq.com",
"url": "/mmtls/2d6d45f1",
"http_user_agent": "MicroMessenger Client",
"http_content_type": "application/octet-stream",
"http_method": "POST",
"protocol": "HTTP/1.1",
"status": 200,
"length": 245
}
}

View file

@ -0,0 +1,30 @@
{
"timestamp": "2023-04-07T00:21:07.805683+0800",
"event_type": "stats",
"stats": {
"uptime": 160,
"capture": {
"kernel_packets": 522,
"kernel_drops": 0,
"errors": 0
},
"flow": {
"memcap": 0,
"tcp": 15,
"udp": 13,
"wrk": {
"spare_sync_avg": 100,
"spare_sync": 11
},
"mgr": {
"full_hash_pass": 1,
"closed_pruned": 0,
"new_pruned": 0
},
"spare": 10100,
"emerg_mode_entered": 0,
"emerg_mode_over": 0,
"memuse": 9965056
}
}
}