Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse files

fixed: add revision param to signature retrieval.

  • Loading branch information...
commit 68200767bb1b200f54bf7518d2cdb1dac3dd6b64 1 parent ae7c627
@firnsy authored
Showing with 6 additions and 3 deletions.
  1. +6 −3 src/output-plugins/spo_echidna.c
View
9 src/output-plugins/spo_echidna.c
@@ -404,8 +404,11 @@ void Echidna(Packet *p, void *event, u_int32_t event_type, void *arg)
data = (SpoEchidnaData *)arg;
/* grab the appropriate signature and classification information */
- sn = GetSigByGidSid(ntohl(((Unified2EventCommon *)event)->generator_id),
- ntohl(((Unified2EventCommon *)event)->signature_id));
+ sn = GetSigByGidSid(
+ ntohl(((Unified2EventCommon *)event)->generator_id),
+ ntohl(((Unified2EventCommon *)event)->signature_id),
+ ntohl(((Unified2EventCommon *)event)->signature_revision)
+ );
cn = ClassTypeLookupById(barnyard2_conf, ntohl(((Unified2EventCommon *)event)->classification_id));
/* initialise our json object */
@@ -586,7 +589,7 @@ int EchidnaEventUDPDataAppend(json_object *json, Packet *p)
int EchidnaNodeConnect(SpoEchidnaData *spd_data)
{
- int ws_ret;
+ int ws_ret = 0;
int tries = 10;
DEBUG_WRAP(DebugMessage(DEBUG_PLUGIN, "echidna: creating context ... \n"););
Please sign in to comment.
Something went wrong with that request. Please try again.