Fixes issues with unexpected XXX alerts where impacted server was not reported

Added Lua getFlowProtoClientIP/getFlowProtoServerIP calls in flows
This commit is contained in:
Luca Deri 2020-11-25 15:51:08 +01:00
parent fbbbe4f4ad
commit 06161556ac
19 changed files with 143 additions and 44 deletions

View file

@ -2,9 +2,12 @@ local alert_keys = require "alert_keys"
-- #################################################
local function createUnexpectedDNS(dns_info)
local function createUnexpectedDNS(client_ip, server_ip)
local built = {
alert_type_params = dns_info
alert_type_params = {
client_ip = client_ip,
server_ip = server_ip
}
}
return built