I am having an issue with a Lua Parser where my callback is getting a
match but it is not looking for further matches because the next match
is too far down in the tcp session. In my lab i tried setting the
"Maximum Session Meta" key to "0" on the de...
We are seeing a lot of sessions come through with Brotli compression. Is
there any thoughts about uncompressing this traffic so that the
Netwitness parsers can leverage the uncompressed packet? Notice the "br"
tag on the response. GET /search?q=love+...
I would like to know if in future releases of Netwitness, will it have
the capability to differentiate traffic from different physical ethernet
ports from the Netwitness application? We would like to differentiate
traffic from different ethernet port...
Hi John, yes I am familiar with that file. I guess we could try
differentiating traffic that way. The reason why i am a little hesitant
is that we would see clients/servers on our 10 network going out to the
internet and also going east/west as well....
Hi Michael, I like the health menu but my question is more towards
having the capability in Netwitness to filter on traffic based on
ethernet physical ports. For instance, on a decoder we could have port 2
ingesting internet traffic(north/south) with...
