Hello Folks,I wanted to know, what do the fieldscid:context/cid:fromAttacker $$,$
cid:context/cid:fromTarget $$,$
mean in the logs for Cisco IDS/Cisco IPS. The values I have are : <ci cid:fromTarget>iFt+TjtbtqMWmdG8zjgFP22OfbG...
Looking at the following log sample (Apache format Access Logs) and the bolded section contained between the <>:1.1.1.1 - - "16/Feb/2010:11:58:55 +1100" GET http://www.testsite.com 304 0 TCP_CLIENT_REFRESH_MISS:DIRECT 7ms DEFAULT_CASE-DefaultGroup-...
I know we have Message ID (MID), Incoming ID (ICID) and Outgoing ID (DCID). But in the following message, what does RID represent?Info: Delivery start DCID 536 MID 21779 to RID [0]