Skip to content

Commit 97c7a10

Browse files
committed
UniRec output: Add SSA_CONF_LEVEL element by ssadetector plugin
1 parent dc20cdf commit 97c7a10

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

extra_plugins/output/unirec/config/unirec-elements.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -284,3 +284,6 @@ OSQUERY_OS_ARCH string cesnet:OSQueryOSArch
284284
OSQUERY_KERNEL_VERSION string cesnet:OSQueryKernelVersion
285285
OSQUERY_SYSTEM_HOSTNAME string cesnet:OSQuerySystemHostname
286286

287+
# --- SYN-SYNACK-ACK (SSA) detection of new handshake within existing connection
288+
SSA_CONF_LEVEL uint8 cesnet:ssaConfLevel # Confidence level of detected SSA
289+

0 commit comments

Comments
 (0)