Question
CEF proto: string or integer?
The common event format (CEF) was created by a company called ArcSight, who were acquired by HP. According to docs on HP's website (search for a file called "CommonEventFormatV24.pdf") the protocol property is defined as:
[ul]In the Fortinet docs, the protocol is an integer:
[ul]
Since CEF is a standard, there should be no ambiguity. Does anyone know if proto should be a string or an integer?
