prelude-correlator/master: Use the easy addAlertReference() method

commit a85cd9d1a64fdb70caee79c784d0aeef80078d71
Author: Yoann Vandoorselaere <[email protected]>
Date:   Wed Nov 4 15:17:29 2009 +0100

    Use the easy addAlertReference() method


========================================

 PreludeCorrelator/plugins/firewall.py |    5 +----
 1 files changed, 1 insertions(+), 4 deletions(-)

========================================

diff --git a/PreludeCorrelator/plugins/firewall.py b/PreludeCorrelator/plugins/firewall.py
index 852b73d..d6f3f46 100644
--- a/PreludeCorrelator/plugins/firewall.py
+++ b/PreludeCorrelator/plugins/firewall.py
@@ -43,10 +43,7 @@ class FirewallPlugin(Plugin):
 
                 if not context.search(ctxname):
                         ctx = context.Context(ctxname, { "expire": 10, "alert_on_expire": True })
-                        ctx.Set("alert.source", idmef.Get("alert.source"))
-                        ctx.Set("alert.target", idmef.Get("alert.target"))
                         ctx.Set("alert.assessment", idmef.Get("alert.assessment"))
                         ctx.Set("alert.classification", idmef.Get("alert.classification"))
                         ctx.Set("alert.correlation_alert.name", "Events to firewall correlation")
-                        ctx.Set("alert.correlation_alert.alertident(0).analyzerid", idmef.Get("alert.analyzer(*).analyzerid")[-1])
-                        ctx.Set("alert.correlation_alert.alertident(0).alertident", idmef.Get("alert.messageid"))
+                        ctx.addAlertReference(idmef)
_______________________________________________
Prelude-cvslog site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-cvslog