logs.cgi/ids.dat: Rework linking to external rule documentation.

Check if the sid of a rule belongs to sourcefire and link to the
changed URL for gathering more details. If the sid of the rule belongs
to emergingthreads now link to the emergingthreads documentation.

Fixes #11806.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/html/cgi-bin/logs.cgi/ids.dat b/html/cgi-bin/logs.cgi/ids.dat
index 98176d6902f04e509dca55d9eb4434b059276625..030fd4b64def42e9995492497d723dfcdb957fbf 100644 (file)
--- a/html/cgi-bin/logs.cgi/ids.dat
+++ b/html/cgi-bin/logs.cgi/ids.dat
@@ -335,10 +335,18 @@ print <<END
 <td valign='top'>
 END
        ;
-       if ($sid ne "n/a") {
-               print "<a href='https://www.snort.org/rule_docs/$sid' ";
+       if ($sid eq "n/a") {
+               print $sid;
+       } elsif ($sid < 1000000) {
+               # Link to sourcefire if the the rule sid is less than 1000000.
+               print "<a href='https://www.snort.org/rule_docs/1-$sid' ";
+               print "target='_blank'>$sid</a></td>\n";
+       } elsif ($sid >= 2000000 and $sid < 3000000) {
+               # Link to emergingthreats if the rule sid is between 2000000 and 3000000.
+               print "<a href='http://doc.emergingthreats.net/$sid' ";
                print "target='_blank'>$sid</a></td>\n";
        } else {
+               # No external link for user defined rules
                print $sid;
        }
 print <<END