Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-14 20:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Fixing a bug with handling downgrade from weird conn to orig.

Browse source
This commit is contained in:
Seth Hall 2011-10-22 01:13:15 -04:00
parent 29bace02b2
commit ff51068598
1 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
scripts/base/frameworks/notice/weird.bro
View file

@ -286,8 +286,8 @@ function report(t: time, name: string, identifier: string, have_conn: bool, addl
if ( action in notice_actions )
{
# Handle notices
if ( action == ACTION_NOTICE_PER_ORIG && have_conn )
identifier = flow_id_string(current_conn$id$orig_h, current_conn$id$resp_h);
if ( have_conn && action == ACTION_NOTICE_PER_ORIG )
identifier = fmt("%s", current_conn$id$orig_h);
else if ( action == ACTION_NOTICE_ONCE )
identifier = "";
@ -299,8 +299,8 @@ function report(t: time, name: string, identifier: string, have_conn: bool, addl
else
{
# Handle logging.
if ( action == ACTION_LOG_PER_ORIG && have_conn )
identifier = flow_id_string(current_conn$id$orig_h, current_conn$id$resp_h);
if ( have_conn && action == ACTION_LOG_PER_ORIG )
identifier = fmt("%s", current_conn$id$orig_h);
else if ( action == ACTION_LOG_ONCE )
identifier = "";