Revert "IDS, replace tls.fingerprint with tls_fingerprint for better performance in custom rules"

This reverts commit a00e646ca2899a078db6c332a582ecfeffa54e16.
This commit is contained in:
Ad Schellevis 2018-10-12 22:18:53 +02:00
parent f30c54420d
commit dcbd0366a1

View File

@ -10,7 +10,7 @@
{% if rule.enabled|default('0') == '1' %}
{{rule.action}}{% if rule.fingerprint|default('') != ""
%} tls {% else %} ip {% endif %} {% if rule.source|default('') != "" %} {{ rule.source }} {% else %} any {% endif %} any -> {% if rule.destination|default('') != "" %} {{ rule.destination }} {% else %} any {% endif %} any (msg:"{{rule.description.replace('"','\"')}}"; {%
if rule.fingerprint|default('') != "" %} tls_fingerprint:"{{rule.fingerprint.lower()}}";{% endif
if rule.fingerprint|default('') != "" %} tls.fingerprint:"{{rule.fingerprint.lower()}}";{% endif
%}{%
if rule.geoip|default('') != ""%} geoip:{% if rule.geoip_direction|default('') != '' %}{{rule.geoip_direction}},{% endif %}{{rule.geoip}} ;{% endif
%} sid:{{