prelude-correlator/master: Correct business hour detection, thanks J. Ignacio Orme??o <[email protected]> for pointing this out.

[email protected] Fri, 12 Jun 2009 17:14:43 +0200 (CEST)
Newsgroups gmane.comp.security.ids.prelude.cvs
Message-ID <[email protected]>
commit f6a8a98b20e73651819096fbda3a93b88f20b69d
Author: Yoann Vandoorselaere <[email protected]>
Date:   Thu Jun 11 13:08:32 2009 +0200

    Correct business hour detection, thanks J. Ignacio OrmeƱo <[email protected]> for pointing this out.


========================================

 ruleset/business-hour.py |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

========================================

diff --git a/ruleset/business-hour.py b/ruleset/business-hour.py
index 1ec2785..db4f6cb 100644
--- a/ruleset/business-hour.py
+++ b/ruleset/business-hour.py
@@ -27,7 +27,8 @@ class BusinessHourPlugin(Plugin):
     def run(self, idmef):
 
         t = time.localtime(int(idmef.Get("alert.create_time")))
-        if not (t.tm_wday == 5 or t.tm_wday == 6 or t.tm_hour >= 9 or t.tm_hour <= 18):
+
+        if not (t.tm_wday == 5 or t.tm_wday == 6 or t.tm_hour < 9 or t.tm_hour > 17):
                 return
 
         if idmef.Get("alert.assessment.impact.completion") != "succeeded":

_______________________________________________
Prelude-cvslog site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-cvslog