aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorErmal <eri@pfsense.org>2012-07-18 08:52:22 +0000
committerErmal <eri@pfsense.org>2012-07-18 08:52:22 +0000
commitf6ef28caded794a145b6fa1bae835c868ea9af5c (patch)
tree571d6d38e4903846c1916da38d2af65edefafe0b
parentd515b896f8ebed1234daa4e5ad6a9c4d7cf77f6c (diff)
downloadpfsense-packages-f6ef28caded794a145b6fa1bae835c868ea9af5c.tar.gz
pfsense-packages-f6ef28caded794a145b6fa1bae835c868ea9af5c.tar.bz2
pfsense-packages-f6ef28caded794a145b6fa1bae835c868ea9af5c.zip
Add description of suppression and remove exessive newlines
-rw-r--r--config/snort/snort_alerts.php8
1 files changed, 6 insertions, 2 deletions
diff --git a/config/snort/snort_alerts.php b/config/snort/snort_alerts.php
index 196519fa..663e7621 100644
--- a/config/snort/snort_alerts.php
+++ b/config/snort/snort_alerts.php
@@ -85,7 +85,10 @@ if ($_POST['todelete'] || $_GET['todelete']) {
}
if ($_GET['act'] == "addsuppress" && is_numeric($_GET['sidid']) && is_numeric($_GET['gen_id'])) {
- $suppress = "suppress gen_id {$_GET['gen_id']}, sig_id {$_GET['sidid']}\n";
+ if (empty($_GET['descr']))
+ $suppress = "suppress gen_id {$_GET['gen_id']}, sig_id {$_GET['sidid']}\n";
+ else
+ $suppress = "#{$_GET['descr']}\nsuppress gen_id {$_GET['gen_id']}, sig_id {$_GET['sidid']}";
if (!is_array($config['installedpackages']['snortglobal']['suppress']))
$config['installedpackages']['snortglobal']['suppress'] = array();
if (!is_array($config['installedpackages']['snortglobal']['suppress']['item']))
@@ -271,6 +274,7 @@ if (file_exists("/var/log/snort/snort_{$if_real}{$snort_uuid}/alert")) {
$alert_date = substr($fields[0], 0, -8);
/* Description */
$alert_descr = $fields[4];
+ $alert_descr_url = urlencode($fields[4]);
/* Priority */
$alert_priority = $fields[12];
/* Protocol */
@@ -306,7 +310,7 @@ if (file_exists("/var/log/snort/snort_{$if_real}{$snort_uuid}/alert")) {
<td class='listr' width='5%'>{$alert_dst_p}</td>
<td class='listr' width='5%' >
{$alert_sid_str}
- <a href='?instance={$instanceid}&act=addsuppress&sidid={$fields[2]}&gen_id={$fields[1]}'>
+ <a href='?instance={$instanceid}&act=addsuppress&sidid={$fields[2]}&gen_id={$fields[1]}&descr={$alert_descr_url}'>
<img src='../themes/{$g['theme']}/images/icons/icon_plus.gif'
width='10' height='10' border='0'
title='click to add to suppress list'></a>