projects
/
ossec-hids.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
- add fortify to lintian
[ossec-hids.git]
/
src
/
analysisd
/
compiled_rules
/
generic_samples.c
diff --git
a/src/analysisd/compiled_rules/generic_samples.c
b/src/analysisd/compiled_rules/generic_samples.c
index
9aae6be
..
57da7b0
100644
(file)
--- a/
src/analysisd/compiled_rules/generic_samples.c
+++ b/
src/analysisd/compiled_rules/generic_samples.c
@@
-1,4
+1,5
@@
-/* @(#) $Id$ */
+/* @(#) $Id: ./src/analysisd/compiled_rules/generic_samples.c, 2011/09/08 dcid Exp $
+ */
/* Copyright (C) 2009 Trend Micro Inc.
* All rights reserved.
/* Copyright (C) 2009 Trend Micro Inc.
* All rights reserved.
@@
-8,7
+9,7
@@
* License (version 2) as published by the FSF - Free Software
* Foundation.
*
* License (version 2) as published by the FSF - Free Software
* Foundation.
*
- * License details at the LICENSE file included with OSSEC or
+ * License details at the LICENSE file included with OSSEC or
* online at: http://www.ossec.net/en/licensing.html
*/
* online at: http://www.ossec.net/en/licensing.html
*/
@@
-19,10
+20,10
@@
-/** Note: If the rule fails to match it should return NULL.
+/** Note: If the rule fails to match it should return NULL.
* If you want processing to continue, return lf (the eventinfo structure).
*/
* If you want processing to continue, return lf (the eventinfo structure).
*/
-
+
/* Example 1:
/* Example 1:
@@
-114,17
+115,17
@@
void *comp_mswin_targetuser_calleruser_diff(Eventinfo *lf)
if(*target_user != *caller_user)
return(lf);
if(*target_user != *caller_user)
return(lf);
- if(*target_user == '\t' ||
+ if(*target_user == '\t' ||
(*target_user == ' ' && target_user[1] == ' '))
(*target_user == ' ' && target_user[1] == ' '))
- break;
+ break;
- target_user++;caller_user++;
+ target_user++;caller_user++;
}
/* If we got in here, the accounts are the same.
* So, we return NULL since we only want to alert if they are different.
}
/* If we got in here, the accounts are the same.
* So, we return NULL since we only want to alert if they are different.
- */
+ */
return(NULL);
}
return(NULL);
}
@@
-142,7
+143,7
@@
void *is_simple_http_request(Eventinfo *lf)
return(lf);
}
return(lf);
}
-
+
/* Simple request, no query. */
if(!strchr(lf->url,'?'))
{
/* Simple request, no query. */
if(!strchr(lf->url,'?'))
{