Actions
Feature #2008
closedPacket display in snort alerts
Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
Snort
Target version:
-
Start date:
11/15/2011
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Description
Here's a quick hack to allow optional display of snort alerts packets.
Default is to not display. A checkbox is provided to Show Packets. When the Save button is clicked then the code to display packet contents is activated and a column is added to the page. It overflows the page a bit depending on the theme page background.
It only displays packets from the current run of snort. Previous alert packets are displayed as 'empty'.
Also added a whois lookup from dnsstuff for the source and destination ip addresses.
Files
Actions