Re: [Prelude Hybrid IDS] #185: defective squid rule in prelude-lml
"Paul Robert Marino" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
thank you the impact type was a typo on my part I did meen to change the severity the reason i wanted to change the severity is because this message is generated when squid cycles its child proccesses. In other words when a child process has handled a predifined maximum number of transactions it stops the child process and spawns a new one, and is also normaly followed by [11323]: Squid Parent: child process 7553 started in the log as such it would probably be a good idea to create a context on the rule in the future. also note [11323]: is the parent process pid by the way what is the prefered method of submiting a patch to a rule would it be a diff or just submit the whole modified file On 12/15/06, Prelude Hybrid IDS <[email protected]> wrote: > > #185: defective squid rule in prelude-lml > > ---------------------------------+------------------------------------------ > Reporter: [email protected] | Owner: yoann > Type: defect | Status: closed > Priority: normal | Milestone: Prelude-LML 0.9.8 > Component: prelude-lml | Version: 0.9 > Severity: blocker | Resolution: fixed > Keywords: squid | > > ---------------------------------+------------------------------------------ > Changes (by yoann): > > * status: assigned => closed > * resolution: => fixed > > Comment: > > Fixed in [8653]. I modified your regexp slightly, corrected the invalid > 'info' impact type, kept medium severity (if you have good reason to > decrease the severity, then it should be discussed), and don't set the > process name statically. > > -- > Ticket URL: <https://trac.prelude-ids.org/ticket/185#comment:2> > Prelude Hybrid IDS <http://www.prelude-ids.org> > The Prelude Hybrid Intrusion Detection System suite > _______________________________________________ > Prelude-devel site list > [email protected] > http://www.prelude-ids.org/mailman/listinfo/prelude-devel > _______________________________________________ Prelude-devel site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-devel