Zobber/suricata_mailtrail

Created April 6, 2020 16:01

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Select an option

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/Zobber/c082ae9cd6602b75c23926b0909afbc5.js"></script>
Save Zobber/c082ae9cd6602b75c23926b0909afbc5 to your computer and use it in GitHub Desktop.

Download ZIP

Raw

suricata_mailtrail

jq -c 'select((.http or .tls) and .alert) | [.flow_id,.http.hostname,.http.http_method,.alert.signature,.src_ip,.dest_ip]' | sed 's/\"//g;s/\[//;s/\]//;'

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment