mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-10-08 15:25:26 +02:00
fix pfsense firewall udp parsing
This commit is contained in:
1 parent
8cfabf101c
commit
8d1ba1f4db
1 file changed
+1
-1
@@ -34,7 +34,7 @@
|
||||
},
|
||||
{
|
||||
"dissect": {
|
||||
"if": "ctx.protocol == 'udp'",
|
||||
"if": "ctx.network?.transport == 'udp'",
|
||||
"field": "ip_sub_msg",
|
||||
"pattern" : "%{source.port},%{destination.port},%{data.length}",
|
||||
"on_failure" : [ {"set" : {"field" : "error.message","value" : "{{ _ingest.on_failure_message }}"}}]
|
||||
|
||||
Reference in new issue
Block a user