./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var
These configuration options are not suitable for version 7.0.6.
This is the eve.json generated by the introduction of the protocol in version 6.0.15.
eve.json (10.1 KB)
The majority of traffic packets in the pcap are S7comm.
The pcap is from GitHub.
I only introduced the template code and did not write any other code related to eve.json.