Browse Source

fix outofband evt generation

alteredCoder 1 year ago
parent
commit
cbf06c25fb
1 changed files with 7 additions and 3 deletions
  1. 7 3
      pkg/acquisition/modules/waf/waf.go

+ 7 - 3
pkg/acquisition/modules/waf/waf.go

@@ -578,7 +578,6 @@ func (r *WafRunner) Run(t *tomb.Tomb) error {
 					if err != nil {
 					if err != nil {
 						return fmt.Errorf("cannot create event from waap context : %w", err)
 						return fmt.Errorf("cannot create event from waap context : %w", err)
 					}
 					}
-					r.logger.Infof("REAL MATCHED RULES: %+v", len(tmpEvt.Waap.MatchedRules))
 					evt = &tmpEvt
 					evt = &tmpEvt
 				}
 				}
 
 
@@ -586,8 +585,13 @@ func (r *WafRunner) Run(t *tomb.Tomb) error {
 				if err != nil {
 				if err != nil {
 					return fmt.Errorf("cannot convert transaction to event : %w", err)
 					return fmt.Errorf("cannot convert transaction to event : %w", err)
 				}
 				}
-				LogWaapEvent(evt)
-				r.outChan <- *evt
+
+				// expTx.MatchedRules() returns also rules that set variables
+				// in evt.Waap.MatchedRules we have filtered those rules
+				if len(evt.Waap.MatchedRules) > 0 {
+					LogWaapEvent(evt)
+					r.outChan <- *evt
+				}
 			}
 			}
 			expTx.Close()
 			expTx.Close()
 			//measure the full time spent in the WAF
 			//measure the full time spent in the WAF