beenull/crowdsec
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

fix outofband evt generation

Browse source
This commit is contained in:
alteredCoder 2023-08-01 10:34:43 +02:00
parent 353926ec91
commit cbf06c25fb
1 changed files with 7 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
pkg/acquisition/modules/waf/waf.go
View file

@ -578,7 +578,6 @@ func (r *WafRunner) Run(t *tomb.Tomb) error {
if err != nil {
return fmt.Errorf("cannot create event from waap context : %w", err)
}
r.logger.Infof("REAL MATCHED RULES: %+v", len(tmpEvt.Waap.MatchedRules))
evt = &tmpEvt
}
@ -586,8 +585,13 @@ func (r *WafRunner) Run(t *tomb.Tomb) error {
if err != nil {
return fmt.Errorf("cannot convert transaction to event : %w", err)
}
LogWaapEvent(evt)
r.outChan <- *evt
// expTx.MatchedRules() returns also rules that set variables
// in evt.Waap.MatchedRules we have filtered those rules
if len(evt.Waap.MatchedRules) > 0 {
LogWaapEvent(evt)
r.outChan <- *evt
}
}
expTx.Close()
//measure the full time spent in the WAF