[Prelude Hybrid IDS] #204: Not seeing all alerts in Prewikka
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#204: Not seeing all alerts in Prewikka
-----------------------+----------------------------------------------------
Reporter: anonymous | Owner: yoann
Type: defect | Status: new
Priority: normal | Milestone:
Component: prewikka | Version: 0.9
Severity: normal | Keywords:
-----------------------+----------------------------------------------------
After upgrading to Prewikka 0.9.9 some of the alert grouping is not
correct.
In 0.9.8 when grouping by classification.text in alert_listing the same
classification alert on multiple sensors would list all of the sensors the
event was detected on. In 0.9.9 Only 1 sensor is shown.
Also when there are two events with similar properties e.g. user
authentication failed for the same user. the front end show 2x alerts, but
when entering that event the alert_listing only shows the details for 1 of
the events.
--
Ticket URL: <https://trac.prelude-ids.org/ticket/204>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel