suricata
suricata copied to clipboard
output: Add linktype description
Amend the linktype output with the linktype name (when available).
The linktype name is included alongside linktype when alert.packet
is enabled. The name is retrieved from a new function that translates the DLT/linktypes recognized by Suricata into a string.
Issue: 6954
Link to ticket: https://redmine.openinfosecfoundation.org/issues/6954
Describe changes:
- Include the linktype name alongside linktype
- Update the schema with linktype_name
Provide values to any of the below to override the defaults.
- To use an LibHTP, Suricata-Verify or Suricata-Update pull request,
link to the pull request in the respective
_BRANCH
variable. - Leave unused overrides blank or remove.
SV_REPO= SV_BRANCH=https://github.com/OISF/suricata-verify/pull/1798 SU_REPO= SU_BRANCH= LIBHTP_REPO= LIBHTP_BRANCH=