Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse files

Changed $msg and $sub in NOTICE()

  • Loading branch information...
commit 172449f945c8453418b125188c3568883aa8146a 1 parent f5bf32f
@srunnels authored
Showing with 9 additions and 9 deletions.
  1. +9 −9 http-basic-auth.bro
View
18 http-basic-auth.bro
@@ -14,14 +14,14 @@ event http_header(c: connection, is_orig: bool, name: string, value: string)
local parts = split1(decode_base64(sub_bytes(value, 7, |value|)), /:/);
if (|parts| == 2)
NOTICE([$note=HTTP::Basic_Auth_Server,
- #$msg="Session identified in which Basic Access Authentication is in use.",
- $msg=fmt("username: %s password: %s",
- parts[1],
- HTTP::default_capture_password == F ? "Blocked" : parts[2]),
- $action=Notice::ACTION_EMAIL,
- $conn=c,
- $identifier=cat(c$id$resp_h,c$id$resp_p),
- $suppress_for=1day
- ]);
+ $msg="Session identified in which Basic Access Authentication is in use.",
+ $sub=fmt("username: %s password: %s",
+ parts[1],
+ HTTP::default_capture_password == F ? "Blocked" : parts[2]),
+ $action=Notice::ACTION_EMAIL,
+ $conn=c,
+ $identifier=cat(c$id$resp_h,c$id$resp_p),
+ $suppress_for=1day
+ ]);
}
}
Please sign in to comment.
Something went wrong with that request. Please try again.