on request, ip addresses have no longer IDS flag enabled

pull/4/head
Sascha Rommelfangen 2017-05-24 16:20:57 +02:00
parent e7c46b2cea
commit ed94db8b27
1 changed files with 1 additions and 1 deletions

View File

@ -193,7 +193,7 @@ for entry in urllist:
comment = "on port: " + str(port)
if is_valid_ipv4_address(hostname.decode('utf-8', 'ignore')):
misp.add_ipdst(new_event, hostname.decode('utf-8', 'ignore'), comment=comment, category='Network activity', to_ids=ids_flag)
misp.add_ipdst(new_event, hostname.decode('utf-8', 'ignore'), comment=comment, category='Network activity', to_ids=False)
else:
misp.add_hostname(new_event, hostname.decode('utf-8', 'ignore'), comment=comment, category='Network activity', to_ids=ids_flag)
try: