Add built-in support for community ID #124

bbannier started this conversation in Proposals & Ideas

bbannier
Apr 6, 2020
Maintainer

We can do two things:

Provide a build-in Spicy function computing the community ID from corresponding input arguments.
Inside the Zeek plugin, provide a zeek::* function that returns the community ID for the current connection.

https://github.com/corelight/community-id-spec

Replies: 0 comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment