From 88db17489af117ba9e62bab4bb29bce1e1765d84 Mon Sep 17 00:00:00 2001 From: pessoles Date: Thu, 1 Sep 2005 01:44:36 +0200 Subject: [PATCH] Distinction du flood et de l'upload darcs-hash:20050831234436-6d78a-f53cad1734b74fa6dc9a99da01ff7877d59f21c9.gz --- surveillance/filtrage_firewall.py | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/surveillance/filtrage_firewall.py b/surveillance/filtrage_firewall.py index 83a61ae7..395ad491 100755 --- a/surveillance/filtrage_firewall.py +++ b/surveillance/filtrage_firewall.py @@ -104,6 +104,14 @@ for log in filtre : proto = int(protocole[resultat_virus.group(5)]) #C'est à dire id pour la base port_src = int(resultat_virus.group(6)) port_dest = int(resultat_virus.group(7)) + # On remplit la base : + ###################### + date=strptime.syslog2pgsql(date) + curseur = pgsql.cursor() + requete = "INSERT INTO virus (date,ip_src,ip_dest,id,port_src,port_dest) VALUES ('%s','%s','%s',%d,%d,%d)" % (date,ip_src,ip_dest,proto,port_src,port_dest) + curseur.execute(requete) + + elif resultat_flood : date = resultat_flood.group(1) ip_src = resultat_flood.group(3) @@ -116,5 +124,5 @@ for log in filtre : ###################### date=strptime.syslog2pgsql(date) curseur = pgsql.cursor() - requete = "INSERT INTO virus (date,ip_src,ip_dest,id,port_src,port_dest) VALUES ('%s','%s','%s',%d,%d,%d)" % (date,ip_src,ip_dest,proto,port_src,port_dest) + requete = "INSERT INTO flood (date,ip_src,ip_dest,id,port_src,port_dest) VALUES ('%s','%s','%s',%d,%d,%d)" % (date,ip_src,ip_dest,proto,port_src,port_dest) curseur.execute(requete)