From 26fd2a0afd823db57107b49a160fb256e3f385a1 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Mon, 1 Nov 2010 16:46:53 +0100 Subject: [PATCH] Add telus and bid references for etpro. --- src/detect-reference.c | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/src/detect-reference.c b/src/detect-reference.c index 68462416da..76bd2d5d9f 100644 --- a/src/detect-reference.c +++ b/src/detect-reference.c @@ -42,7 +42,7 @@ #include "util-byte.h" #include "util-debug.h" -#define PARSE_REGEX "^\\s*(cve|nessus|url|mcafee|bugtraq|arachnids)\\s*,\"?\\s*\"?\\s*([a-zA-Z0-9\\-_\\.\\/\\?\\=]+)\"?\\s*\"?" +#define PARSE_REGEX "^\\s*(cve|nessus|url|mcafee|bugtraq|arachnids|bid|telus)\\s*,\"?\\s*\"?\\s*([a-zA-Z0-9\\-_\\.\\/\\?\\=]+)\"?\\s*\"?" /* Static prefix for references - Maybe we should move them to reference.config in the future */ char REFERENCE_BUGTRAQ[] = "http://www.securityfocus.com/bid/"; @@ -51,6 +51,8 @@ char REFERENCE_NESSUS[] = "http://cgi.nessus.org/plugins/dump.php3?id="; char REFERENCE_ARACHNIDS[] = "http://www.whitehats.com/info/IDS"; char REFERENCE_MCAFEE[] = "http://vil.nai.com/vil/dispVirus.asp?virus_k="; char REFERENCE_URL[] = "http://"; +char REFERENCE_TELUS[] = "http://"; +char REFERENCE_BID[] = "http://"; static pcre *parse_regex; static pcre_extra *parse_regex_study; @@ -168,6 +170,10 @@ static Reference *DetectReferenceParse (char *rawstr) ref->key = REFERENCE_MCAFEE; } else if (strcasecmp(ref_key,"arachnids") == 0) { ref->key = REFERENCE_ARACHNIDS; + } else if (strcasecmp(ref_key,"telus") == 0) { + ref->key = REFERENCE_ARACHNIDS; + } else if (strcasecmp(ref_key,"bid") == 0) { + ref->key = REFERENCE_ARACHNIDS; } else { SCLogError(SC_ERR_REFERENCE_UNKNOWN, "unknown reference key \"%s\". " "Supported keys are cve, bugtraq, nessus, url, mcafee, "