Merge pull request #172 from GuillaumeCSekoia/sekoia/fix-destination-…

…ip-and-configuration Fixing Suricata configuration errors (although it did not stopped it …
CybercentreCanada · Feb 10, 2025 · 4b2e521 · 4b2e521
2 parents 3c4052f + c84b5c1
commit 4b2e521
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/suricata_/conf/suricata.yaml b/suricata_/conf/suricata.yaml
@@ -1927,8 +1927,8 @@ __RULE_FILES__
 ## Auxiliary configuration files.
 ##
 
-classification-file: /etc/suricata/classification.config
-reference-config-file: /etc/suricata/reference.config
+classification-file: /usr/local/etc/suricata/classification.config
+reference-config-file: /usr/local/etc/suricata/reference.config
 # threshold-file: /etc/suricata/threshold.config
 
 ##

diff --git a/suricata_/helper.py b/suricata_/helper.py
@@ -109,7 +109,7 @@ def attach_network_connection(data: dict):
 
         network_data = {
             "objectid": {
-                "tag": ext_hostname + f"{f':{dest_port}' if dest_port else ''}",
+                "tag": f"{dest_ip if dest_ip else ext_hostname}" + f"{f':{dest_port}' if dest_port else ''}",
                 "time_observed": timestamp,
             },
             "source_ip": src_ip,