Changes between Version 4 and Version 5 of waue/2009/SEC_to_ICAS

Timestamp:

Aug 4, 2009, 6:16:14 PM (16 years ago)

Author:

waue

Comment:

--

waue/2009/SEC_to_ICAS

@@ -20 +20 @@
 8. Search a correlated_event in correlated_event queue that correlated_event.{ IP_dst,
 port_dst,signature } == event.{ IP_dst, port_dst, signature }
-9. correlated_event _event.endtime  max(event.endtime, MO_event.endtime)
+9. correlated_event _event.endtime <- max(event.endtime, MO_event.endtime)
 10. correlated_event.reference append (event.id )
-11. correlated_event.IP_src  correlated_event. IP_ src ∪ event. IP_ src
-correlated_event t.port_src  correlated_event. port_src ∪ event. port_ src
+11. correlated_event.IP_src <- correlated_event. IP_ src ∪ event. IP_ src
+correlated_event t.port_src <- correlated_event. port_src ∪ event. port_ src
 12. else
 13. new OO_events as event_scenario in event queue