prelude: Add other actions than just ACTION_DROP when packet drop

9 years ago · b1c1699699
parent 4d4a3d0b8f
commit b1c1699699
1 changed files with 4 additions and 1 deletions
--- a/src/alert-prelude.c
+++ b/src/alert-prelude.c
@ -221,7 +221,10 @@ static int EventToImpact(const PacketAlert *pa, const Packet *p, idmef_alert_t *

    idmef_impact_set_severity(impact, severity);

-    if (PACKET_TEST_ACTION(p, ACTION_DROP)) {
+    if (PACKET_TEST_ACTION(p, ACTION_DROP) ||
+        PACKET_TEST_ACTION(p, ACTION_REJECT) ||
+        PACKET_TEST_ACTION(p, ACTION_REJECT_DST) ||
+        PACKET_TEST_ACTION(p, ACTION_REJECT_BOTH) ) {
        idmef_action_t *action;

        ret = idmef_action_new(&action);