Pcap_filename in eve.json is not accurate when using --pcap-file-continuous

ivan · April 11, 2022, 7:35am

Done.

ivan · April 13, 2022, 1:06pm

@Andreas_Herz , there is no any update. What can we do ?

Andreas_Herz · April 16, 2022, 10:54pm

Thanks for the report on redmine. Once someone has time to tackle the bug you will get an update.

ivan · May 10, 2022, 8:03am

@Andreas_Herz Do you have any update ?

Andreas_Herz · May 16, 2022, 7:32pm

Updates will be posted in the redmine ticket once someone has time to work on that bug

Topic		Replies	Views
"pcap_cnt" is not accurate on TCP streams Help suricata	2	481	January 26, 2023
How to create a separate eve.json for each processed pcap file? Help	18	1975	December 19, 2022
Can we add pcap file name in eve.json Help	1	541	January 20, 2022
Suricata in socket mode: determining if a PCAP is done processing Help	5	31	January 21, 2025
Eve.json filename options Help suricata	7	526	August 7, 2023