Fixed field mapping @ zeekengine.py (#143)

Fixed field mapping @ zeekengine.py: resp_h is destination host, please refer to https://docs.zeek.org/en/current/log-formats.html
2023-08-14 15:14:42 +03:00 · 2023-08-14 15:14:42 +03:00 · 4f989dcd94
commit 4f989dcd94
parent 9939dc3bf4
1 changed files with 1 additions and 1 deletions
--- a/analysis/classes/zeekengine.py
+++ b/analysis/classes/zeekengine.py
@ -270,7 +270,7 @@ class ZeekEngine(object):
                if record is not None:
                    f = {"filename": record["filename"],
                         "ip_src": record["id.orig_h"],
-                         "ip_dst": record["id.orig_p"],
+                         "ip_dst": record["id.resp_h"],
                         "mime_type": record["mime_type"],
                         "sha1": record["sha1"]}
                    if f not in self.files: