From a31f7d0f26bbb601c779a5f69e2ea746aeddb6b6 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Thu, 27 May 2021 16:19:12 +0200
Subject: [PATCH] Multiple fields for port, ip-src,dst-port following feedback
 from CONCORDIA

Multiple fields for port, ip-src,dst-port following feedback from CONCORDIA
---
 objects/ddos/definition.json | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/objects/ddos/definition.json b/objects/ddos/definition.json
index 55bebf3..5ca7d97 100644
--- a/objects/ddos/definition.json
+++ b/objects/ddos/definition.json
@@ -16,7 +16,8 @@
       ],
       "description": "Destination port of the attack",
       "misp-attribute": "port",
-      "ui-priority": 0
+      "ui-priority": 0,
+      "multiple": true
     },
     "first-seen": {
       "description": "Beginning of the attack",
@@ -40,7 +41,8 @@
       ],
       "description": "IP address originating the attack",
       "misp-attribute": "ip-src",
-      "ui-priority": 1
+      "ui-priority": 1,
+      "multiple": true
     },
     "last-seen": {
       "description": "End of the attack",
@@ -66,7 +68,8 @@
       ],
       "description": "Port originating the attack",
       "misp-attribute": "port",
-      "ui-priority": 0
+      "ui-priority": 0,
+      "multiple": true
     },
     "text": {
       "description": "Description of the DDoS",
@@ -94,5 +97,5 @@
     "domain-dst"
   ],
   "uuid": "e2f124d6-f57c-4f93-99e6-8450545fa05d",
-  "version": 6
-}
\ No newline at end of file
+  "version": 7
+}