Now works with multiple domains!

doppiosecurity · Mar 1, 2012 · 706e06e · 706e06e
1 parent 5e6d977
commit 706e06e
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/sens_dns.bro b/sens_dns.bro
@@ -9,13 +9,13 @@ export {
         redef enum Notice::Type += {
                 SensitiveDNS_Lookup,
         };
-
         const hot_dns =
-        "armstrong.pezcyclingnews.com"
+                /^lemonde.pezcyclingnews.com/ |
+                /^lemonde.velonews.com/ |
+                /^www.beammeupscotty.com/ |
+                /^first.second.third.yahoo.com/
 &redef;
-
 }
-
 event dns_request(c: connection, msg: dns_msg, query: string, qtype: count, qclass: count) &priority=5
         {
         local orig = c$id$orig_h;