From f5363e9edde90146d502e6ea03a305cd91dbbd60 Mon Sep 17 00:00:00 2001 From: Andrew <a@3ilson.com> Date: Tue, 10 Sep 2019 09:09:22 -0400 Subject: [PATCH] Update pfv100.grok --- pfv100.grok | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pfv100.grok b/pfv100.grok index dc580e9..4e04e93 100644 --- a/pfv100.grok +++ b/pfv100.grok @@ -50,7 +50,7 @@ PF_APP_ERROR webConfigurator (%{DATA:pf_ACTION}) for \'(%{DATA:pf_USER})\' from PF_APP_GEN (%{GREEDYDATA:pf_ACTION}) # OPENVPN -PF_OPENVPN_CONNECTION %{IP:vpn_src_ip}\:%{INT:vpn_src_port}%{SPACE}\[%{DATA:vpn_client}\]%{SPACE}Peer%{SPACE}Connection%{SPACE}Initiated%{SPACE}with%{GREEDYDATA} +OPENVPN %{IP:vpn_src_ip}\:%{INT:vpn_src_port}%{SPACE}\[%{DATA:vpn_client}\]%{SPACE}Peer%{SPACE}Connection%{SPACE}Initiated%{SPACE}with%{GREEDYDATA} # SURICATA SURICATA %{SPACE}\[%{NUMBER:ids_gen_id}:%{NUMBER:ids_sig_id}:%{NUMBER:ids_sig_rev}\]%{SPACE}%{GREEDYDATA:ids_desc}%{SPACE}\[Classification:%{SPACE}%{GREEDYDATA:ids_class}\]%{SPACE}\[Priority:%{SPACE}%{NUMBER:ids_pri}\]%{SPACE}{%{WORD:ids_proto}}%{SPACE}%{IP:ids_src_ip}:%{NUMBER:ids_src_port}%{SPACE}->%{SPACE}%{IP:ids_dest_ip}:%{NUMBER:ids_dest_port} -- GitLab