software.log

1386717221.171855 x.x.x.x - HTTP::BROWSER Adobe Flash Player - - - - - Adobe Flash Player

Bro isn't displaying and version info. Is there a reason?

For those connections the client sent just "Adobe Flash Player" as the
user-agent. It appears the flash updater does this when downloading the
newest version.

I can't seem to get the actual player to trigger. Is it supposed to show up in software.log as Flash not Adobe Flash Player? Security onion has a vulnerable config including flash but I have never seen it show up in software.log.

I don’t believe Security Onion includes flash by default.