Adding upstream version 1.34.4.
Signed-off-by: Daniel Baumann <daniel@debian.org>
This commit is contained in:
parent
e393c3af3f
commit
4978089aab
4963 changed files with 677545 additions and 0 deletions
35
plugins/inputs/suricata/testdata/v2/alert.json
vendored
Normal file
35
plugins/inputs/suricata/testdata/v2/alert.json
vendored
Normal file
|
@ -0,0 +1,35 @@
|
|||
{
|
||||
"timestamp": "2021-05-30T20:07:13.208777+0200",
|
||||
"flow_id": 1696236471136137,
|
||||
"in_iface": "s1-suricata",
|
||||
"event_type": "alert",
|
||||
"src_ip": "10.0.0.5",
|
||||
"src_port": 18715,
|
||||
"dest_ip": "179.60.192.3",
|
||||
"dest_port": 80,
|
||||
"proto": "TCP",
|
||||
"alert": {
|
||||
"action": "allowed",
|
||||
"gid": 1,
|
||||
"source": {
|
||||
"ip": "10.0.0.5",
|
||||
"port": 18715
|
||||
},
|
||||
"target": {
|
||||
"ip": "179.60.192.3",
|
||||
"port": 80
|
||||
},
|
||||
"signature_id": 6,
|
||||
"rev": 0,
|
||||
"signature": "Corrupted HTTP body",
|
||||
"severity": 3,
|
||||
"category": "Misc activity"
|
||||
},
|
||||
"flow": {
|
||||
"pkts_toserver": 1,
|
||||
"pkts_toclient": 0,
|
||||
"bytes_toserver": 174,
|
||||
"bytes_toclient": 0,
|
||||
"start": "2021-05-30T20:07:13.208777+0200"
|
||||
}
|
||||
}
|
18
plugins/inputs/suricata/testdata/v2/dns.json
vendored
Normal file
18
plugins/inputs/suricata/testdata/v2/dns.json
vendored
Normal file
|
@ -0,0 +1,18 @@
|
|||
{
|
||||
"timestamp": "2023-04-07T00:20:57.995497+0800",
|
||||
"flow_id": 2150129093506313,
|
||||
"in_iface": "eth1",
|
||||
"event_type": "dns",
|
||||
"src_ip": "192.168.0.100",
|
||||
"src_port": 39262,
|
||||
"dest_ip": "192.168.0.1",
|
||||
"dest_port": 53,
|
||||
"proto": "UDP",
|
||||
"dns": {
|
||||
"type": "query",
|
||||
"id": 7145,
|
||||
"rrname": "reddit.com",
|
||||
"rrtype": "A",
|
||||
"tx_id": 10
|
||||
}
|
||||
}
|
29
plugins/inputs/suricata/testdata/v2/drop.json
vendored
Normal file
29
plugins/inputs/suricata/testdata/v2/drop.json
vendored
Normal file
|
@ -0,0 +1,29 @@
|
|||
{
|
||||
"timestamp": "2023-04-07T00:21:01.318245+0800",
|
||||
"flow_id": 180225164834117,
|
||||
"in_iface": "eth1",
|
||||
"event_type": "drop",
|
||||
"src_ip": "192.168.0.110",
|
||||
"src_port": 46016,
|
||||
"dest_ip": "54.192.18.125",
|
||||
"dest_port": 443,
|
||||
"proto": "TCP",
|
||||
"drop": {
|
||||
"len": 76,
|
||||
"tos": 0,
|
||||
"ttl": 64,
|
||||
"ipid": 62316,
|
||||
"tcpseq": 3900248957,
|
||||
"tcpack": 2339873683,
|
||||
"tcpwin": 501,
|
||||
"syn": false,
|
||||
"ack": true,
|
||||
"psh": true,
|
||||
"rst": false,
|
||||
"urg": false,
|
||||
"fin": true,
|
||||
"tcpres": 0,
|
||||
"tcpurgp": 0,
|
||||
"reason": "stream error"
|
||||
}
|
||||
}
|
21
plugins/inputs/suricata/testdata/v2/flow.json
vendored
Normal file
21
plugins/inputs/suricata/testdata/v2/flow.json
vendored
Normal file
|
@ -0,0 +1,21 @@
|
|||
{
|
||||
"timestamp": "2023-04-07T00:28:22.136079+0800",
|
||||
"flow_id": 911610881873910,
|
||||
"in_iface": "eth1",
|
||||
"event_type": "flow",
|
||||
"src_ip": "192.168.0.121",
|
||||
"src_port": 50212,
|
||||
"dest_ip": "142.251.130.3",
|
||||
"dest_port": 443,
|
||||
"proto": "TCP",
|
||||
"flow": {
|
||||
"age": 0,
|
||||
"state": "new",
|
||||
"alerted": false
|
||||
},
|
||||
"tcp": {
|
||||
"tcp_flags": "00",
|
||||
"tcp_flags_ts": "00",
|
||||
"tcp_flags_tc": "00"
|
||||
}
|
||||
}
|
22
plugins/inputs/suricata/testdata/v2/http.json
vendored
Normal file
22
plugins/inputs/suricata/testdata/v2/http.json
vendored
Normal file
|
@ -0,0 +1,22 @@
|
|||
{
|
||||
"timestamp": "2023-04-07T00:27:50.220224+0800",
|
||||
"flow_id": 1124332026121723,
|
||||
"in_iface": "eth2",
|
||||
"event_type": "http",
|
||||
"src_ip": "192.168.0.120",
|
||||
"src_port": 33950,
|
||||
"dest_ip": "203.205.239.179",
|
||||
"dest_port": 80,
|
||||
"proto": "TCP",
|
||||
"tx_id": 0,
|
||||
"http": {
|
||||
"hostname": "hkminorshort.weixin.qq.com",
|
||||
"url": "/mmtls/2d6d45f1",
|
||||
"http_user_agent": "MicroMessenger Client",
|
||||
"http_content_type": "application/octet-stream",
|
||||
"http_method": "POST",
|
||||
"protocol": "HTTP/1.1",
|
||||
"status": 200,
|
||||
"length": 245
|
||||
}
|
||||
}
|
30
plugins/inputs/suricata/testdata/v2/status.json
vendored
Normal file
30
plugins/inputs/suricata/testdata/v2/status.json
vendored
Normal file
|
@ -0,0 +1,30 @@
|
|||
{
|
||||
"timestamp": "2023-04-07T00:21:07.805683+0800",
|
||||
"event_type": "stats",
|
||||
"stats": {
|
||||
"uptime": 160,
|
||||
"capture": {
|
||||
"kernel_packets": 522,
|
||||
"kernel_drops": 0,
|
||||
"errors": 0
|
||||
},
|
||||
"flow": {
|
||||
"memcap": 0,
|
||||
"tcp": 15,
|
||||
"udp": 13,
|
||||
"wrk": {
|
||||
"spare_sync_avg": 100,
|
||||
"spare_sync": 11
|
||||
},
|
||||
"mgr": {
|
||||
"full_hash_pass": 1,
|
||||
"closed_pruned": 0,
|
||||
"new_pruned": 0
|
||||
},
|
||||
"spare": 10100,
|
||||
"emerg_mode_entered": 0,
|
||||
"emerg_mode_over": 0,
|
||||
"memuse": 9965056
|
||||
}
|
||||
}
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue