Browse Source

SignalOccurence can't lead to BanApplication if there is no source in the Event (#96)

Thibault "bui" Koechlin 5 years ago
parent
commit
652b54ee81
1 changed files with 5 additions and 0 deletions
  1. 5 0
      pkg/outputs/ouputs.go

+ 5 - 0
pkg/outputs/ouputs.go

@@ -45,6 +45,11 @@ func OvflwToOrder(sig types.SignalOccurence, prof types.Profile) (*types.BanOrde
 		/*if the profil has no remediation, no order */
 		return nil, nil, fmt.Errorf("no remediation")
 	}
+
+	if sig.Source == nil {
+		return nil, nil, fmt.Errorf("no 'source' in event (Meta.source_ip empty?)")
+	}
+
 	ordr.MeasureSource = "local"
 	ordr.Reason = sig.Scenario
 	//Identify scope