prelude-correlator/master: DetectTime correction for Dshield generated CorrelationAlert
[email protected] Sat, 16 Jan 2010 17:24:05 +0100 (CET)
| Newsgroups | gmane.comp.security.ids.prelude.cvs |
|---|---|
| Message-ID | <[email protected]> |
commit 784ec4a8c0b011281257b72a4464481998567a84 Author: Yoann Vandoorselaere <[email protected]> Date: Sun Jan 10 15:24:53 2010 +0100 DetectTime correction for Dshield generated CorrelationAlert ======================================== PreludeCorrelator/plugins/dshield.py | 1 - 1 files changed, 0 insertions(+), 1 deletions(-) ======================================== diff --git a/PreludeCorrelator/plugins/dshield.py b/PreludeCorrelator/plugins/dshield.py index be5417f..5f6396a 100644 --- a/PreludeCorrelator/plugins/dshield.py +++ b/PreludeCorrelator/plugins/dshield.py @@ -98,7 +98,6 @@ class DshieldPlugin(Plugin): if ca.getUpdateCount() == 0: ca.Set("alert.classification.text", "IP source matching Dshield database") ca.Set("alert.correlation_alert.name", "IP source matching Dshield database") - ca.Set("alert.detect_time", entry[2] + " 00:00:00Z") ca.Set("alert.assessment.impact.description", "Dshield gathered this IP address from firewall drops logs (%s - reports: %d, attacks: %d, first/last seen: %s - %s)" % (source, entry[0], entry[1], entry[2], entry[3])) ca.Set("alert.assessment.impact.severity", "high") _______________________________________________ Prelude-cvslog site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-cvslog