瀏覽代碼

fix #873 without breaking backward (#1052)

Thibault "bui" Koechlin 3 年之前
父節點
當前提交
3c768490ba
共有 2 個文件被更改,包括 3 次插入0 次删除
  1. 2 0
      pkg/leakybucket/overflows.go
  2. 1 0
      pkg/parser/enrich_geoip.go

+ 2 - 0
pkg/leakybucket/overflows.go

@@ -77,6 +77,8 @@ func SourceFromEvent(evt types.Event, leaky *Leaky) (map[string]models.Source, e
 		src.Scope = &leaky.scopeType.Scope
 		if v, ok := evt.Enriched["ASNumber"]; ok {
 			src.AsNumber = v
+		} else if v, ok := evt.Enriched["ASNNumber"]; ok {
+			src.AsNumber = v
 		}
 		if v, ok := evt.Enriched["IsoCode"]; ok {
 			src.Cn = v

+ 1 - 0
pkg/parser/enrich_geoip.go

@@ -54,6 +54,7 @@ func GeoIpASN(field string, p *types.Event, ctx interface{}) (map[string]string,
 		return nil, nil
 	}
 	ret["ASNNumber"] = fmt.Sprintf("%d", record.AutonomousSystemNumber)
+	ret["ASNumber"] = fmt.Sprintf("%d", record.AutonomousSystemNumber)
 	ret["ASNOrg"] = record.AutonomousSystemOrganization
 
 	log.Tracef("geoip ASN %s -> %s, %s", field, ret["ASNNumber"], ret["ASNOrg"])