Skip to content

Commit 68209e8

Browse files
committed
UniRec output: config: add APP_ID field
APP_ID represents application identifier by libprotoident or Flowmon's plugin. Warning: value encoding is dependent on flow exporter
1 parent 9001d34 commit 68209e8

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

extra_plugins/output/unirec/config/unirec-elements.txt

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -115,6 +115,7 @@ HB_SIZE_PAYLOAD uint16 e8057id703 # Heartbeat payload
115115
#FLOWDIR_SYN uint8 e8057id299 # Packet with SYN flag only flag
116116
VENOM uint8 e8057id1001 # Venom rootkit detection
117117
IPV6_TUN_TYPE uint8 e16982id405 # IPv6 tunnel type
118+
APP_ID bytes e0id95 # Application ID from libprotoident / NBAR2 / Flowmon's NBAR plugin
118119

119120
# --- Flowmon TLS fields
120121
TLS_CONTENT_TYPE uint8 flowmon:tlsContentType # tlsContentType

0 commit comments

Comments
 (0)