prelude-correlator/master: Increase default threshold for bruteUser to 5

[email protected] Wed, 17 Jun 2009 18:37:07 +0200 (CEST)
Newsgroups gmane.comp.security.ids.prelude.cvs
Message-ID <[email protected]>
commit e7ad5d78f602b4e3e9dde163e04b07fe52201541
Author: Yoann Vandoorselaere <[email protected]>
Date:   Wed Jun 17 17:59:49 2009 +0200

    Increase default threshold for bruteUser to 5


========================================

 PreludeCorrelator/plugins/bruteforce.py |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

========================================

diff --git a/PreludeCorrelator/plugins/bruteforce.py b/PreludeCorrelator/plugins/bruteforce.py
index e82a63c..85cc3cc 100644
--- a/PreludeCorrelator/plugins/bruteforce.py
+++ b/PreludeCorrelator/plugins/bruteforce.py
@@ -47,7 +47,7 @@ class BruteForcePlugin(Plugin):
             return
 
         for user in userid:
-            ctx = Context("BRUTE_U_" + user, { "expire": 120, "threshold": 2 }, update = True)
+            ctx = Context("BRUTE_U_" + user, { "expire": 120, "threshold": 5 }, update = True)
             ctx.addAlertReference(idmef)
 
             if ctx.CheckAndDecThreshold():
_______________________________________________
Prelude-cvslog site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-cvslog