zeek/testing/btest/Baseline/policy.frameworks.logging.test-logging/ssh.log
Gilbert Clark gc355804@ohio.edu b723ecd0e0 Header modification to LogWriterAscii to make it easier for scripts to
understand bro log files.
2011-08-13 21:10:51 -07:00

9 lines
456 B
Text

# t id.orig_h id.orig_p id.resp_h id.resp_p status country
# path:'ssh'
# separator:' '
# t=time id.orig_h=addr id.orig_p=port id.resp_h=addr id.resp_p=port status=string country=string
1313294707.543971 1.2.3.4 1234 2.3.4.5 80 success unknown
1313294707.543971 1.2.3.4 1234 2.3.4.5 80 failure US
1313294707.543971 1.2.3.4 1234 2.3.4.5 80 failure UK
1313294707.543971 1.2.3.4 1234 2.3.4.5 80 success BR
1313294707.543971 1.2.3.4 1234 2.3.4.5 80 failure MX