From: rcombs Date: Wed, 29 Oct 2014 17:44:22 +0000 (-0400) Subject: alert_fast fix X-Git-Tag: 3.0.0-233~1308 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=64f3250164fc0f3785576bf7e80455d8f7fe0d48;p=thirdparty%2Fsnort3.git alert_fast fix --- diff --git a/ChangeLog b/ChangeLog index a5da39162..dfe738210 100644 --- a/ChangeLog +++ b/ChangeLog @@ -45,6 +45,7 @@ -- fixed segfaults due to unitialized cleanup_pkt and unset stream_tcp -- matched up stream_tcp.policy enum with defines -- tweaked S5_TRACE output +-- fixed alert_fast to default to not print payload 125 -- discovered can't catch exceptions thrown from Lua to C++; need to diff --git a/src/loggers/alert_fast.cc b/src/loggers/alert_fast.cc index d2e222ad5..262fb4074 100644 --- a/src/loggers/alert_fast.cc +++ b/src/loggers/alert_fast.cc @@ -84,7 +84,7 @@ static const Parameter s_params[] = { "file", Parameter::PT_BOOL, nullptr, "false", "output to " F_NAME " instead of stdout" }, - { "packet", Parameter::PT_BOOL, nullptr, "true", + { "packet", Parameter::PT_BOOL, nullptr, "false", "output packet dump with alert" }, { "limit", Parameter::PT_INT, "0:", "0", @@ -140,7 +140,7 @@ bool FastModule::begin(const char*, int, SnortConfig*) file = false; limit = 0; units = 0; - packet = true; + packet = false; return true; } @@ -300,7 +300,7 @@ void FastLogger::alert(Packet *p, const char *msg, Event *event) LogIpAddrs(fast_log, p); } - if(packet) + if ( packet || ScOutputAppData() ) { TextLog_NewLine(fast_log); #ifdef REG_TEST