Permalink
Browse files

Changed $msg and $sub in NOTICE()

  • Loading branch information...
1 parent f5bf32f commit 172449f945c8453418b125188c3568883aa8146a @srunnels committed May 4, 2012
Showing with 9 additions and 9 deletions.
  1. +9 −9 http-basic-auth.bro
View
@@ -14,14 +14,14 @@ event http_header(c: connection, is_orig: bool, name: string, value: string)
local parts = split1(decode_base64(sub_bytes(value, 7, |value|)), /:/);
if (|parts| == 2)
NOTICE([$note=HTTP::Basic_Auth_Server,
- #$msg="Session identified in which Basic Access Authentication is in use.",
- $msg=fmt("username: %s password: %s",
- parts[1],
- HTTP::default_capture_password == F ? "Blocked" : parts[2]),
- $action=Notice::ACTION_EMAIL,
- $conn=c,
- $identifier=cat(c$id$resp_h,c$id$resp_p),
- $suppress_for=1day
- ]);
+ $msg="Session identified in which Basic Access Authentication is in use.",
+ $sub=fmt("username: %s password: %s",
+ parts[1],
+ HTTP::default_capture_password == F ? "Blocked" : parts[2]),
+ $action=Notice::ACTION_EMAIL,
+ $conn=c,
+ $identifier=cat(c$id$resp_h,c$id$resp_p),
+ $suppress_for=1day
+ ]);
}
}

0 comments on commit 172449f

Please sign in to comment.