Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
GNU General Public License v2.0
344
stars
190
forks
source link
Changes to support command line option "-j" to include Event ID in alert output #218
Closed
FredAustin closed 6 years ago
The Event ID is often needed to tie the Snort/Suricata alert back to the actual data in the unified2 file.