-/* @(#) $Id$ */
+/* @(#) $Id: ./src/analysisd/compiled_rules/generic_samples.c, 2011/09/08 dcid Exp $
+ */
/* Copyright (C) 2009 Trend Micro Inc.
* All rights reserved.
* License (version 2) as published by the FSF - Free Software
* Foundation.
*
- * License details at the LICENSE file included with OSSEC or
+ * License details at the LICENSE file included with OSSEC or
* online at: http://www.ossec.net/en/licensing.html
*/
-/** Note: If the rule fails to match it should return NULL.
+/** Note: If the rule fails to match it should return NULL.
* If you want processing to continue, return lf (the eventinfo structure).
*/
-
+
/* Example 1:
if(*target_user != *caller_user)
return(lf);
- if(*target_user == '\t' ||
+ if(*target_user == '\t' ||
(*target_user == ' ' && target_user[1] == ' '))
- break;
+ break;
- target_user++;caller_user++;
+ target_user++;caller_user++;
}
/* If we got in here, the accounts are the same.
* So, we return NULL since we only want to alert if they are different.
- */
+ */
return(NULL);
}
return(lf);
}
-
+
/* Simple request, no query. */
if(!strchr(lf->url,'?'))
{