Hi there,
I have splunk enterprise set up on my local machine. I was able to obtain network traffic from a particular machine which was captured using wireshark (source type:csv file). I would like to know, how do I identify the TCP SYN scan activities of a particular ip address using splunk ?
