Re: [Prelude Hybrid IDS] #204: Not seeing all alerts in Prewikka
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#204: Not seeing all alerts in Prewikka
-----------------------+----------------------------------------------------
Reporter: anonymous | Owner: yoann
Type: defect | Status: assigned
Priority: normal | Milestone: Prewikka 0.9.10
Component: prewikka | Version: 0.9
Severity: normal | Resolution:
Keywords: |
-----------------------+----------------------------------------------------
Comment (by anonymous):
Two alerts with the same classification.text but different
assessment.impact.severity or assesment.impact.completion.
On the frontend it groups these alerts as similar but on entering the
alert the filtering of assesment.impact.completion and
assessment.impact.severity removes some of the results.
Hope that helps
--
Ticket URL: <https://trac.prelude-ids.org/ticket/204#comment:2>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel