fix getting horizontal portscan evidence uids

stratosphereips · Nov 29, 2023 · bb22df2 · bb22df2
1 parent ba9de07
commit bb22df2
Showing 1 changed file with 10 additions and 7 deletions.
diff --git a/modules/network_discovery/horizontal_portscan.py b/modules/network_discovery/horizontal_portscan.py
@@ -44,7 +44,7 @@ def combine_evidence(self):
                         'protocol': protocol,
                         'profileid': profileid,
                         'twid': twid,
-                        'uid': final_evidence_uids,
+                        'uids': final_evidence_uids,
                         'dport':dport,
                         'pkts_sent': final_pkts_sent,
                         'timestamp': timestamp,
@@ -212,20 +212,23 @@ def check(self, profileid: str, twid: str):
                         'protocol': protocol,
                         'profileid': profileid,
                         'twid': twid,
-                        'uid': self.get_uids(dstips),
+                        'uids': self.get_uids(dstips),
                         'dport':dport,
                         'pkts_sent':self.get_packets_sent(dstips),
                         'timestamp': next(iter(dstips.values()))['stime'],
                         'state': state,
                         'amount_of_dips': amount_of_dips
                         }
 
-                    self.decide_if_time_to_set_evidence_or_combine(evidence, cache_key)
+                    self.decide_if_time_to_set_evidence_or_combine(
+                        evidence,
+                        cache_key
+                        )
 
     def decide_if_time_to_set_evidence_or_combine(
-        self,
-        evidence: dict,
-        cache_key: str
+            self,
+            evidence: dict,
+            cache_key: str
         ) -> bool:
         """
         sets the evidence immediately if it was the
@@ -307,5 +310,5 @@ def set_evidence_horizontal_portscan(
             proto=evidence["protocol"],
             profileid=evidence["profileid"],
             twid=evidence["twid"],
-            uid=evidence["uid"]
+            uid=evidence["uids"]
             )