From 5b4be0f18fd2f83dd5a5f29a18a4aa03fc70a020 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Peter=20M=C3=BCller?= Date: Tue, 21 Nov 2017 20:27:45 +0100 Subject: [PATCH] show IDS rule names correctly in WebUI log MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit The WebUI IDS log did not display the rule name for alerts where a signature with a five digit number was triggered (some Emerging Threats signatures are using them). Changing the regular expression so it will match on five digit SIDs, too. Fixes #11519. Signed-off-by: Peter Müller Signed-off-by: Michael Tremer --- html/cgi-bin/logs.cgi/ids.dat | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/logs.cgi/ids.dat b/html/cgi-bin/logs.cgi/ids.dat index 44b3abdac8..98176d6902 100644 --- a/html/cgi-bin/logs.cgi/ids.dat +++ b/html/cgi-bin/logs.cgi/ids.dat @@ -387,7 +387,7 @@ sub processevent } ($title,$classification,$priority,$date,$time,$srcip,$srcport,$destip,$destport, $sid) = ("n/a","n/a","n/a","n/a","n/a","n/a","n/a","n/a","n/a", "n/a"); @refs = (); - $_ =~ m/:([0-9]{1,4})\] (.*) \[\*\*\]/; + $_ =~ m/:([0-9]{1,5})\] (.*) \[\*\*\]/; $title = &Header::cleanhtml($2,"y"); } if ($_ =~ m/Classification: (.*)\] \[Priority: (\d)\]/) { -- 2.39.2