Add parenthesis around Preprocessor (cosmetic)

firnsy / barnyard2

Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.

GNU General Public License v2.0

343 stars 189 forks source link

Closed prof-ninjason closed 8 years ago

prof-ninjason commented 8 years ago

For those who are gathering stats might be wrong if they switched from snort's alerts to barnyard2's alerts

From ($preproc) to $preproc:

[Previous] (snort_decoder) WARNING: IPV6 ISATAP spoof [] [Current] snort_decoder: WARNING: IPV6 ISATAP spoof []

For example counting in mysql: 17 | (snort_decoder) WARNING: IPV6 ISATAP spoof [] 48 | snort_decoder: WARNING: IPV6 ISATAP spoof []

prof-ninjason commented 8 years ago

This is plainly read through gen-msg.map as is. If I want parenthesis around the (snort_decoder), I can edit them with a sed command line.