new upstream release (3.3.0); modify package compatibility for Stretch
[ossec-hids.git] / contrib / logtesting / 6 / res
index fbe5a6f..45c6a43 100644 (file)
@@ -6,6 +6,10 @@
 
 **Phase 2: Completed decoding.
        decoder: 'vsftpd'
+       dstuser: 'xx'
+       status: 'OK UPLOAD'
+       srcip: '1.2.3.4'
+       url: '/a.php'
 
 **Phase 3: Completed filtering (rules).
        Rule id: '11404'