Skip to content

use dnstap info if sockaddr#15

Open
alanhlam wants to merge 4 commits intonbrownus:2.0from
alanhlam:dnstap-info
Open

use dnstap info if sockaddr#15
alanhlam wants to merge 4 commits intonbrownus:2.0from
alanhlam:dnstap-info

Conversation

@alanhlam
Copy link
Copy Markdown

@alanhlam alanhlam commented Oct 31, 2018

No description provided.

JSON.stringify(data),
{"timestamp":new Date('1541004016.778' * 1000),"sequence":4734103,"unknown":[],"socket_address":{"family":"inet","port":80,"ip":"172.217.29.142","unknown":"0000000000000000"},"message":"",
"dnstap": {
"172.217.29.142": "google.com"
Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This resulting structure should be { $ip: [ $name, ... ]}. ES will complain hard if we swap between string and array of string.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants