From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peter =?utf-8?q?M=C3=BCller?= To: development@lists.ipfire.org Subject: [PATCH v2] show IDS rule names correctly in WebUI log Date: Tue, 21 Nov 2017 20:27:45 +0100 Message-ID: <20171121202745.644b012d.peter.mueller@link38.eu> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============7950892670096412927==" List-Id: --===============7950892670096412927== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable The WebUI IDS log did not display the rule name for alerts where a signature with a five digit number was triggered (some Emerging Threats signatures are using them). Changing the regular expression so it will match on five digit SIDs, too. Fixes #11519. Signed-off-by: Peter M=C3=BCller --- html/cgi-bin/logs.cgi/ids.dat | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/logs.cgi/ids.dat b/html/cgi-bin/logs.cgi/ids.dat index 44b3abdac..98176d690 100644 --- a/html/cgi-bin/logs.cgi/ids.dat +++ b/html/cgi-bin/logs.cgi/ids.dat @@ -387,7 +387,7 @@ sub processevent } ($title,$classification,$priority,$date,$time,$srcip,$srcport,$destip,$d= estport, $sid) =3D ("n/a","n/a","n/a","n/a","n/a","n/a","n/a","n/a","n/a", "n= /a"); @refs =3D (); - $_ =3D~ m/:([0-9]{1,4})\] (.*) \[\*\*\]/; + $_ =3D~ m/:([0-9]{1,5})\] (.*) \[\*\*\]/; $title =3D &Header::cleanhtml($2,"y"); } if ($_ =3D~ m/Classification: (.*)\] \[Priority: (\d)\]/) { --=20 2.13.6 --===============7950892670096412927==--