Project

General

Profile

Actions

Feature #8203

closed

pfSense-pkg-suricata: extended eve output selectable headers

Added by Julian Wecke over 6 years ago. Updated about 6 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Suricata
Target version:
-
Start date:
12/12/2017
Due date:
% Done:

100%

Estimated time:
Plus Target Version:

Description

If the extended eve output is selected suircate gets configured to log all possible http headers. This might be too much logging in some cases. For example the logging of the Authorization header could leak login credentials.

The gui should allow to configure the logged headers in the extended http eve output. The same goes for the logging of smtp events. The logged fields should be selectable via the gui.

Actions

Also available in: Atom PDF