Commits on Dec 12, 2018

1. Restructure client/server and process fields …

   Changed
   
   - client_ip - client.ip (changed to ip type)
   - client_port - client.port
   - client_server - client.domain
   - client_proc - client.process.name
   - client_cmdline - client.process.args (changed to an array)
   - direction - network.direction
   - ip - server.ip (changed to ip type)
   - port - server.port
   - server - server.domain
   - proc - server.process.name
   - cmdline - server.process.args (change to an array)
   
   Added
   
   - client.process.executable
   - client.process.working_directory
   - client.process.pid
   - client.process.ppid
   - client.process.start
   - server.process.executable
   - server.process.working_directory
   - server.process.pid
   - server.process.ppid
   - server.process.start
   
   The top-level `process` field is populated with the `server.process`
   or `client.process` (server takes priority). Likewise for flows `process`
   is populated with the `destination.process` or the `client.process`
   (destination takes priority).

   

   andrewkroh committed Dec 12, 2018
   Configuration menu

   • View commit details
   • Copy full SHA for 0081e9f
   • Browse repository at this point

   Copy the full SHA

   0081e9f View commit details

   Browse the repository at this point in the history