[ARGUS] Converting Google VPC flow logs to Argus

Carter Bullard carter at qosient.com
Wed Apr 20 11:31:14 EDT 2022


Gentle people,
The conversion of zeek conn.logs to argus is doing great, at least 4 sites are using it to convert their logs without a bug report … Yay !!!
The next step for raconvert.1 is to develop a conversion configuration for other flow types, and Google VPC flow logs seems to be a good candidate.

If you have some Google flow logs sitting around and can share, I’d like to put together a raconvert.google <http://raconvert.google/>.conf file to see if the strategy is successful.

Thanks, and hope all is most excellent,

Carter
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20220420/5e62b753/attachment.htm>


More information about the argus mailing list