Advertisement
JSkier

suricata eve hashes

Oct 10th, 2016
198
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
YAML 1.72 KB | None | 0 0
  1. {"timestamp":"2016-10-10T13:17:47.073303-0500","flow_id":607337898656215,"event_type":"fileinfo","vlan":95,"src_ip":"141.211.32.32","src_port":80,"dest_ip":"192.168.1.1","dest_port":51716,"proto":"TCP","http":{"hostname":"www.isr.umich.edu","url":"\/cps\/M-ABLE\/materials\/EEWE\/Business%20Plan%20Template.pdf","http_user_agent":"Mozilla\/5.0 (Windows NT 6.1; Win64; x64; rv:49.0) Gecko\/20100101 Firefox\/49.0","http_content_type":"application\/pdf","http_refer":"https:\/\/www.google.com\/","http_method":"GET","protocol":"HTTP\/1.1","status":200,"length":748225},"app_proto":"http","fileinfo":{"filename":"\/cps\/M-ABLE\/materials\/EEWE\/Business Plan Template.pdf","magic":"PDF document, version 1.3","state":"CLOSED","md5":"0e26bfdecba382074c4b14d048ccd516","sha1":"e70f41a89c5389e97e489fbcb5818d6f17cb15ce","sha256":"acdebd0906bbe479fd70be0cbe2c08067562d5590afff6aa88140f029465a67d","stored":false,"size":982,"tx_id":0}}
  2.  
  3. {"timestamp":"2016-10-10T13:18:02.591007-0500","flow_id":92683464304126,"event_type":"fileinfo","vlan":195,"src_ip":"141.211.32.32","src_port":80,"dest_ip":"10.68.101.1","dest_port":52578,"proto":"TCP","http":{"hostname":"www.isr.umich.edu","url":"\/cps\/M-ABLE\/materials\/EEWE\/Business%20Plan%20Template.pdf","http_user_agent":"Wget\/1.17.1 (linux-gnu)","http_content_type":"application\/pdf","http_method":"GET","protocol":"HTTP\/1.1","status":200,"length":748225},"app_proto":"http","fileinfo":{"filename":"\/cps\/M-ABLE\/materials\/EEWE\/Business Plan Template.pdf","magic":"PDF document, version 1.3","state":"CLOSED","md5":"0e26bfdecba382074c4b14d048ccd516","sha1":"e70f41a89c5389e97e489fbcb5818d6f17cb15ce","sha256":"acdebd0906bbe479fd70be0cbe2c08067562d5590afff6aa88140f029465a67d","stored":false,"size":982,"tx_id":0}}
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement