Changes between Version 4 and Version 5 of waue/2009/SEC_to_ICAS


Ignore:
Timestamp:
Aug 4, 2009, 6:16:14 PM (15 years ago)
Author:
waue
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • waue/2009/SEC_to_ICAS

    v4 v5  
    20208. Search a correlated_event in correlated_event queue that correlated_event.{ IP_dst,
    2121port_dst,signature } == event.{ IP_dst, port_dst, signature }
    22 9. correlated_event _event.endtime max(event.endtime, MO_event.endtime)
     229. correlated_event _event.endtime <- max(event.endtime, MO_event.endtime)
    232310. correlated_event.reference append (event.id )
    24 11. correlated_event.IP_src correlated_event. IP_ src ∪ event. IP_ src
    25 correlated_event t.port_src correlated_event. port_src ∪ event. port_ src
     2411. correlated_event.IP_src <- correlated_event. IP_ src ∪ event. IP_ src
     25correlated_event t.port_src <- correlated_event. port_src ∪ event. port_ src
    262612. else
    272713. new OO_events as event_scenario in event queue