-
Notifications
You must be signed in to change notification settings - Fork 609
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
pfSense-pkg-suricata: Suricata eve flow patch #383
pfSense-pkg-suricata: Suricata eve flow patch #383
Conversation
Allow users to enable "flow" in when logging to EVE.json. Since this will log big amounts of data, the option is disabled by default.
Allow users to enable "flow" in when logging to EVE.json. Since this will log big amounts of data, the option is disabled by default.
Allow users to enable "flow" in when logging to EVE.json. Since this will log big amounts of data, the option is disabled by default.
@bmeeks8 can you take a look please? |
I am fine with this logging option addition. Thank you to @johannrichard for the contribution! There have been lots of folks contributing to improving the package recently. Good to see the interest and willingness to chip in and help improve the package. Bill |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please bump PORTREVISION (or add PORTREVISION=1
below PORTVERSION line in port Makefile to make sure we will get a new package built
Make sure the package will be rebuilt
@@ -2,6 +2,7 @@ | |||
|
|||
PORTNAME= pfSense-pkg-suricata | |||
PORTVERSION= 3.2.3 | |||
PORTREVISION= 1 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Added PORTREVISION
- set update instruction notes on pkg-message ChangeLog v1.2.0: bumped minimum supported Python version to 2.4 implemented support for property diffs (Tigris #383) allow user-configurable cvsgraph display (Tigris #336) allow rNNNN syntax for Subversion revision numbers (Tigris #441) display revision numbers in CVS tag/branch selector (Tigris #546) allow roots to have optional context (#58) use a more secure temporary file generator (#159) fix problems with make-database and special characters (#141, #182) fix bogus default ci_when value in cvsdb (#200) standalone query interface removed (#206) GUI support (--gui) removed from standalone.py ChangeLog v1.2.1: security fix: escape subdir lastmod file name PR: 245728 Submitted by: Yasuhito FUTATSUKI
Changes since 0.3.0: We reached v1.0.0 - fix!: Replace limit flag with paginate by @ankitpokhrel in #359 - fix!: Append components on edit instead of overriding by @ankitpokhrel in #368 - feat!: Append label to an issue, show labels at issue list view by @stchar in #300 - refactor!: Move boards and project list to subcommand by @ankitpokhrel in #314 - feat: Support custom fields on issue create by @ankitpokhrel in #319 - feat: Add support to read from .netrc by @adolsalamanca in #329 - feat: Add support for OS keyrings/-chains by @boyvanamstel in #348 - feat: Support auth with personal access tokens by @marek-veber / @ankitpokhrel in #327 - feat: Allow to set fixVersions on issue creation by @ankitpokhrel in #276 - feat: Allow insecure TLS by @ankitpokhrel in #305 - feat: Add --no-browser option to open cmd by @ankitpokhrel in #308 - feat: Add search option for boards on jira init by @ankitpokhrel in #322 - feat: Add issues unlink command by @sushilkg in #347 - feat: Support refresh for issues list by @GZLiew in #325 - feat: Ability to delete issue by @ankitpokhrel in #336 - feat: Allow to set custom fields on epic create by @ankitpokhrel in #364 - feat: Allow to edit release-info/fixVersions by @ankitpokhrel in #365 - feat: Allow removing labels on edit by @ankitpokhrel in #371 - feat: Support creating issues with custom subtask type by @danobi in #372 - feat: Allow removing component on edit by @ankitpokhrel in #374 - feat: Allow removing fixVersions on edit by @ankitpokhrel in #376 - feat: Support custom fields on issue edit by @ankitpokhrel in #377 - feat: Jira init non-interactive by @ankitpokhrel in #381 - feat: Show subtasks in issue view by @ankitpokhrel in #382 - feat: Allow project filter in raw jql by @ankitpokhrel in #395 - fix: Makefile compatiblity with Make 3.81 by @danmichaelo in #252 - fix: Config generation issue by @ankitpokhrel in #275 - fix(cfg): Strip trailing slash on server name by @ankitpokhrel in #295 - fix: Jira client should respect timeout opt by @ankitpokhrel in #304 - fix: Respect GLAMOUR_STYLE env on issue view by @ankitpokhrel in #317 - fix: Get subtask handle from config by @ankitpokhrel in #296 - fix: Jira wiki parser by @ankitpokhrel in #326 - fix: Display correctly columns in list sprint command help by @adolsalamanca in #320 - fix: Panic on empty sub-list by @ankitpokhrel in #330 - fix: Issue with assigning user by @ankitpokhrel in #321 - fix: OOM bug on issue view by @ankitpokhrel in #350 - fix: Assign parent key as is on edit by @ankitpokhrel in #351 - fix: Add additional check for total boards returned by @ankitpokhrel in #360 - fix: Issue with query param in user assignment by @ankitpokhrel in #380 - fix: Subtask clone by @ankitpokhrel in #383 - fix: editing issue with custom field in non interactive mode by @DrudgeRajen in #391 - dep: Upgrade charmbracelet/glamour to 0.5.0 by @ankitpokhrel in #309 - dep: Upgrade rivo/tview to latest by @ankitpokhrel in #310 - dep: Upgrade outdated packages by @ankitpokhrel in #311 - dep: Upgrade cobra to 1.4.0 by @ankitpokhrel in #373 - Use md ext for tmp file to trigger vim syntax by @ElementalWarrior in #318 Full Changelog: ankitpokhrel/jira-cli@v0.3.0...v1.0.0
Update the default location of the DB. Changes since 1.8.1: v1.8.2 Added * More translation strings (#373) (#388) Changed * Enforce git config on startup (#383) * Respect file scheme URIs for SQLite. (#387) Fixed * Convert octal notation file names in Git (#380) * Git clone on SSH with MySQL (#382) * Escaping for embed gists (#381) Other * Update deps Golang & JS deps
Suricata can (also) log flow info in EVE, which can be used when analysing with an ELK stack. This change enables this in the interface editor as well as creates the corresponding
YAML
.Since enabling this option potentially generates larg(er) log files, including packet capture, the option is disabled by default.