suricata
suricata copied to clipboard
output: Add linktype name
Continuation of #11277
Issue: 6954
This commit adds the linktype name to the output stream. The name is determined from the pcap utility function pcap_datalink_val_to_name
Link to ticket: https://redmine.openinfosecfoundation.org/issues/6954
Describe changes:
- Include the linktype name alongside linktype
- Update the schema with linktype_name
Updates:
- Rebased sv branch
Provide values to any of the below to override the defaults.
SV_BRANCH=https://github.com/OISF/suricata-verify/pull/1853