Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in / Register
Toggle navigation
Menu
Open sidebar
Vladimir
noc
Commits
49770001
Commit
49770001
authored
Sep 02, 2009
by
Dmitry Volodin
Browse files
"Rogue AP Detected" and "Rogue AP Removed" event classes
parent
9eb25f9c
Changes
1
Hide whitespace changes
Inline
Side-by-side
fm/rules/classes/dot11.py
View file @
49770001
...
...
@@ -91,3 +91,36 @@ class WDSAuthenticationTimeout(EventClass):
repeat_suppression
=
False
repeat_suppression_interval
=
0
trigger
=
None
##
## Rogue AP Detected
##
class
RogueAPDetected
(
EventClass
):
name
=
"Rogue AP Detected"
category
=
"SECURITY"
priority
=
"WARNING"
subject_template
=
"Roque AP Detected by {{ap}}: {{mac}}"
body_template
=
"""Access Point {{ap}} has detected roque AP with MAC address {{mac}} at channel {{channel}}.
Rogue AP SSID is: {{ssid}}"""
repeat_suppression
=
False
repeat_suppression_interval
=
3600
trigger
=
None
class
Vars
:
mac
=
Var
(
required
=
True
,
repeat
=
False
)
ap
=
Var
(
required
=
False
,
repeat
=
False
)
channel
=
Var
(
required
=
False
,
repeat
=
False
)
ssid
=
Var
(
required
=
False
,
repeat
=
False
)
##
## Rogue AP Removed
##
class
RogueAPRemoved
(
EventClass
):
name
=
"Rogue AP Removed"
category
=
"SECURITY"
priority
=
"NORMAL"
subject_template
=
"Roque AP Removed: {{mac}}@{{ap}}"
body_template
=
"""Roque AP {{mac}} has left {{ap}} area"""
repeat_suppression
=
False
repeat_suppression_interval
=
3600
trigger
=
None
class
Vars
:
ap
=
Var
(
required
=
True
,
repeat
=
False
)
mac
=
Var
(
required
=
True
,
repeat
=
False
)
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment