Project

General

Profile

Feature #10466

Add checkbox to Suricata blocked host view to resolve all resolvable IP's automatically

Added by tasty ratz 6 months ago.

Status:
New
Priority:
Low
Assignee:
-
Category:
Suricata
Target version:
-
Start date:
04/17/2020
Due date:
% Done:

0%

Estimated time:

Description

Manually resolving individual IP's is cumbersome when I want to get a holistic view of the blocked hosts. Also, resolving the IP's on everything might help me catch falsely flagged blocks by sticking out as having a legitimate use source.

While resolving these may result in additional DNS queries, I feel like it provides value for the use case.

Also available in: Atom PDF