Payloads for flowspecs don't seem appear

[andrewyager]

The payload rules for flowspec attacks don't seem to appear

[andrewyager]

Raised with FastNetMon team (issue id #4560)

[andrewyager]

A new FNM Advanced has been released which includes the flowspec UUID in the rule set response. This will now be included in the JSON render for the attack, but is not currently integrated into the actions button.

[andrewyager]

The FNM team have indicated this is "by design" at this stage, and this has been requested as a feature request.

https://features.fastnetmon.com/feature-requests/p/include-packet-details-in-partialblock-notifications-via-external-command

The packet dumps are actually stored on the FNM file system, so it may be possible to grab these and include them by mounting the packet details into the notifier Docker Container (assuming on the same host) but the filenames do not necessarily allow an easy alignment with the attack details that have come through.

At this point, it's unclear whether the right thing to do for Partial Bans is to remove the promise of packet details or to leave them.