2.6.6 csv

The csv output plugin allows alert data to be written in a format easily importable to a database. The output fields and their order may be customized.

2.6.6.1 Format

verbatim529#

• filename: the name of the log file. The default name is #tex2html_wrap_inline6941#logdir#tex2html_wrap_inline6943#/alert.csv. You may specify ;SPMquot;stdout;SPMquot; for terminal output. The name may include an absolute or relative path.

• format: The list of formatting options is below. If the formatting option is ;SPMquot;default;SPMquot;, the output is in the order of the formatting options listed.
  • timestamp
  • sig_generator
  • sig_id
  • sig_rev
  • msg
  • proto
  • src
  • srcport
  • dst
  • dstport
  • ethsrc
  • ethdst
  • ethlen
  • tcpflags
  • tcpseq
  • tcpack
  • tcplen
  • tcpwindow
  • ttl
  • tos
  • id
  • dgmlen
  • iplen
  • icmptype
  • icmpcode
  • icmpid
  • icmpseq

• limit: an optional limit on file size which defaults to 128 MB. The minimum is 1 KB. See #Log_Limits#3882> for more information.

2.6.6.2 Example

verbatim530#