Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-06 08:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Include file information in notices

Browse source 
Add file_desc and file_mime_type information to notice output if it
exists in the notice.
This commit is contained in:
Justin Azoff 2014-01-13 16:55:07 -05:00
parent 1411164d05
commit 852af5d02e
1 changed files with 12 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

15
scripts/base/frameworks/notice/main.bro
View file

@ -400,11 +400,20 @@ function email_notice_to(n: Notice::Info, dest: string, extend: bool)
# First off, finish the headers and include the human readable messages # First off, finish the headers and include the human readable messages
# then leave a blank line after the message. # then leave a blank line after the message.
email_text = string_cat(email_text, "\nMessage: ", n$msg); email_text = string_cat(email_text, "\nMessage: ", n$msg, "\n");
if ( n?$sub ) if ( n?$sub )
email_text = string_cat(email_text, "\nSub-message: ", n$sub); email_text = string_cat(email_text, "Sub-message: ", n$sub, "\n");
email_text = string_cat(email_text, "\n\n"); email_text = string_cat(email_text, "\n");
# add information about the file if it exists
if (n?$file_desc)
email_text = string_cat(email_text, "File Description: ", n$file_desc, "\n");
if (n?$file_mime_type)
email_text = string_cat(email_text, "File Mime Type: ", n$file_mime_type, "\n");
if (n?$file_desc || n?$file_mime_type)
email_text = string_cat(email_text, "\n");
# Next, add information about the connection if it exists. # Next, add information about the connection if it exists.
if ( n?$id ) if ( n?$id )