From 438deca0081c58eec331e1e1490fefae70f26138 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Wed, 6 Aug 2025 17:03:56 +0100 Subject: [PATCH] suricata-reporter: Add source/destination ports to the emails, too Signed-off-by: Michael Tremer --- config/suricata/suricata-reporter | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/config/suricata/suricata-reporter b/config/suricata/suricata-reporter index 1a055717c..b711d9fcc 100644 --- a/config/suricata/suricata-reporter +++ b/config/suricata/suricata-reporter @@ -387,9 +387,12 @@ class Worker(multiprocessing.Process): " %-20s : %s" % (_("Signature"), event.alert_signature), " %-20s : %s" % (_("Category"), event.alert_category), " %-20s : %s" % (_("Severity"), event.alert_severity), - " %-20s : %s" % (_("Timestamp"), event.timestamp.strftime("%A, %d %B %Y at %H:%M:%S %Z")), - " %-20s : %s" % (_("Source"), event.source_address), - " %-20s : %s" % (_("Destination"), event.destination_address), + " %-20s : %s" % (_("Timestamp"), + event.timestamp.strftime("%A, %d %B %Y at %H:%M:%S %Z")), + " %-20s : %s:%s" % (_("Source"), + event.source_address, event.source_port or event.icmp_code), + " %-20s : %s:%s" % (_("Destination"), + event.destination_address, event.destination_port or event.icmp_type), " %-20s : %s" % (_("Protocol"), event.protocol), "", ] -- 2.47.3