[jira] [Updated] (METRON-1259) BasicAsaParser issue - ASA ciscotag error messages

["ed de (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/METRON-1259?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

ed de updated METRON-1259:
--------------------------
    Summary: BasicAsaParser  issue - ASA ciscotag error messages  (was: ASA ciscotag error messages)

> BasicAsaParser  issue - ASA ciscotag error messages
> ---------------------------------------------------
>
>                 Key: METRON-1259
>                 URL: https://issues.apache.org/jira/browse/METRON-1259
>             Project: Metron
>          Issue Type: Bug
>    Affects Versions: 0.4.1
>         Environment: apache metron 0.4.1 git cloned
>            Reporter: ed de
>
> Not sure what version the ASA would be, there are multiples.
> Applied the ASA parser, seems to be working for a lot of traffic, but any traffic that has a cisco tag that doesnt match whats in the parser, seems to not make it through.  Is the ASA parser supposed to drop packets where the cisco tag doesnt match?
> Here is a sample, and the tags are different at times.
> 2017-09-26 18:22:00.356 o.a.m.p.a.BasicAsaParser [INFO] [Metron] No pattern for ciscotag 'ASA-5-338303'



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)