MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

fixed silly bug in priority assignment of nids export

pull/61/head
Christophe Vandeplas 2012-06-28 14:58:19 +02:00
parent 5993e3eec8
commit 500418cb61
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
app/Controller/EventsController.php
View File

@ -733,12 +733,16 @@ class EventsController extends AppController {
switch ($item['Event']['risk']) {
case 'Undefined':
$priority = '4';
break;
case 'Low':
$priority = '3';
break;
case 'Medium':
$priority = '2';
break;
case 'High':
$priority = '1';
break;
default:
$priority = '4';
}
@ -848,9 +852,9 @@ class EventsController extends AppController {
1 // rev
);
break;
case 'hostname':
// TODO nids - fix the hostname format and the domain format to have no false positives (include regex after content)
case 'domain':
// TODO nids - fix the hostname format and the domain format to have no false positives (include regex after content)
case 'hostname':
$rules[] = sprintf($rule_format,
'udp', // proto
'any', // src_ip
@ -889,7 +893,7 @@ class EventsController extends AppController {
'$EXTERNAL_NET', // dst_ip
'$HTTP_PORTS', // dst_port
'Outgoing HTTP URL: '.$attribute['value'], // msg
'flow:to_server,established; uricontent:"'.$attribute['value'].'"; nocase;', // rule_content
'flow:to_server,established; uricontent:"'.$attribute['value'].'"; nocase; http_header', // rule_content
'tag:session,600,seconds;', // tag
$sid, // sid
1 // rev