Hi!
On 04/09/2025 17:06, elsif via IntelMQ-dev wrote:
"optional_fields" : [ [ "extra.", "spi_size", "convert_int" ],
Is that the size of a serial interface?
[ "extra.", "exchange_type", "validate_to_none" ],
Does that indicate what type of trade that is?
These two could be given different names to be clearer and better reflect their actual meaning. Maybe adding a prefix `isakmp_`.
Best regards Sebastian