Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixes 20210127 #5805

Closed
wants to merge 2 commits into from
Closed

Fixes 20210127 #5805

wants to merge 2 commits into from

Conversation

regit
Copy link
Contributor

@regit regit commented Jan 29, 2021

2 small improvements on logging and unix socket mode.

Describe changes:

  • unix-socket mode and -l are compatible so allow it
  • Only output ja3 and ja3s if present

regit added 2 commits January 29, 2021 23:48
This will prevent JSON entries like the following that occur
with the dedault configuration (ja3 deactivated and extended
tls ouput activated):

  "tls": {
    "subject": "C=GB, ST=London, L=London, O=Global Security, OU=IT Department, CN=example.com",
    "issuerdn": "C=GB, ST=London, L=London, O=Global Security, OU=IT Department, CN=example.com",
    "serial": "00:9C:FC:DA:1D:A4:70:87:5D",
    "fingerprint": "b8:18:2d:cb:c9:f8:1a:66:75:13:18:31:24:e0:92:35:42:ab:96:89",
    "version": "TLSv1",
    "notbefore": "2020-05-03T11:07:28",
    "notafter": "2021-05-03T11:07:28",
    "ja3": {},
    "ja3s": {}
  }
Commit 93642a0 did prevent to
specify the logging directory on command line and use the unix
socket.

It looks like the implementation has evolved and the arbitrary
limitation can be removed allowing a user to start unix socket
without editing the configuration file.
@regit regit requested a review from a team as a code owner January 29, 2021 23:13
@codecov
Copy link

codecov bot commented Jan 29, 2021

Codecov Report

Merging #5805 (6ff3a8e) into master (62e665c) will increase coverage by 0.00%.
The diff coverage is 71.42%.

@@           Coverage Diff           @@
##           master    #5805   +/-   ##
=======================================
  Coverage   72.38%   72.38%           
=======================================
  Files         604      604           
  Lines      179369   179373    +4     
=======================================
+ Hits       129837   129844    +7     
+ Misses      49532    49529    -3     
Flag Coverage Δ
suricata-verify 49.15% <83.33%> (+<0.01%) ⬆️
unittests 63.07% <0.00%> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

This was referenced Feb 12, 2021
@victorjulien
Copy link
Member

Merged in #5840, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants