more lining up. more blaming Seth!

srunnels · May 4, 2012 · 42fcc89 · 42fcc89
1 parent 8830a8c
commit 42fcc89
Showing 1 changed file with 14 additions and 15 deletions.
diff --git a/http-basic-auth.bro b/http-basic-auth.bro
@@ -7,20 +7,19 @@ export {
   };
 }
 
-event http_header(c: connection, is_orig: bool, name: string, value: string) 
-	{
-	if (/AUTHORIZATION/ in name && /Basic/ in value)
-		{
-		local parts = split1(decode_base64(sub_bytes(value, 7, |value|)), /:/);
-		if (|parts| == 2)
-		  NOTICE([$note=HTTP::Basic_Auth_Server,
-                  $msg="Server identified in which Basic Access Authentication is in use.",
-                  $sub=fmt("username: %s password: %s", 
-                  parts[1], 
-                  HTTP::default_capture_password == F ? "Blocked" : parts[2]),
+event http_header(c: connection, is_orig: bool, name: string, value: string)
+    {
+    if (/AUTHORIZATION/ in name && /Basic/ in value)
+        {
+        local parts = split1(decode_base64(sub_bytes(value, 7, |value|)), /:/);
+        if (|parts| == 2)
+          NOTICE([$note=HTTP::Basic_Auth_Server,
+                  $msg="Server identified on which Basic Access Authentication is in use."
+                  $sub=fmt("username: %s password: %s",
+                           parts[1],
+                           HTTP::default_capture_password == F ? "Blocked" : parts[2]),
                   $conn=c,
                   $identifier=cat(c$id$resp_h,c$id$resp_p),
-                  $suppress_for=1day
-                 ]);
-		}
-	}
+                  $suppress_for=1day]);
+        }
+    }