Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-17 14:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Fix an off-by-one error when grabbing x-originating-ip header in email.

Browse source
This commit is contained in:
Seth Hall 2016-06-21 13:59:01 -04:00
parent 90399db32d
commit e27f311059
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/base/protocols/smtp/main.bro
View file

@ -255,8 +255,8 @@ event mime_one_header(c: connection, h: mime_header_rec) &priority=5
else if ( h$name == "X-ORIGINATING-IP" )
{
local addresses = extract_ip_addresses(h$value);
if ( 1 in addresses )
c$smtp$x_originating_ip = to_addr(addresses[1]);
if ( 0 in addresses )
c$smtp$x_originating_ip = to_addr(addresses[0]);
}
else if ( h$name == "X-MAILER" ||