diff --git a/debian/changelog b/debian/changelog index 60c299b..6e525b2 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +securityonion-web-page (20141015-0ubuntu0securityonion64) trusty; urgency=medium + + * Issue 964: securityonion-web-page: add "bottom" queries for long tail analysis + + -- Doug Burks Mon, 01 Aug 2016 13:56:29 -0400 + securityonion-web-page (20141015-0ubuntu0securityonion63) trusty; urgency=medium * Issue 973: securityonion-web-page: Apache ServerName localhost diff --git "a/debian/patches/Issue-964:-securityonion-web-page:-add-\"bottom\"-queries-for-long-tail-analysis" "b/debian/patches/Issue-964:-securityonion-web-page:-add-\"bottom\"-queries-for-long-tail-analysis" new file mode 100644 index 0000000..1cc3f4b --- /dev/null +++ "b/debian/patches/Issue-964:-securityonion-web-page:-add-\"bottom\"-queries-for-long-tail-analysis" @@ -0,0 +1,364 @@ +Description: + TODO: Put a short summary on the line above and replace this paragraph + with a longer explanation of this change. Complete the meta-information + with other relevant fields (see below for details). To make it easier, the + information below has been extracted from the changelog. Adjust it or drop + it. + . + securityonion-web-page (20141015-0ubuntu0securityonion64) trusty; urgency=medium + . + * Issue 964: securityonion-web-page: add "bottom" queries for long tail analysis +Author: Doug Burks + +--- +The information above should follow the Patch Tagging Guidelines, please +checkout http://dep.debian.net/deps/dep3/ to learn about the format. Here +are templates for supplementary fields that you might want to add: + +Origin: , +Bug: +Bug-Debian: http://bugs.debian.org/ +Bug-Ubuntu: https://launchpad.net/bugs/ +Forwarded: +Reviewed-By: +Last-Update: + +--- securityonion-web-page-20141015.orig/elsa/menu.php ++++ securityonion-web-page-20141015/elsa/menu.php +@@ -50,13 +50,13 @@ function showhide(tspan, tri) { + @media all and (min-width: 0px) and (max-width: 230px) { + .tab { + font-size:12px; +- margin:0px; ++ margin-left:0px; + } + } + + @media all and (min-width: 231px) { + .tab { +- margin:25px; ++ margin-left:25px; + } + } + +@@ -67,24 +67,25 @@ function showhide(tspan, tri) { + /* Define href variables */ + $h1 = "/elsa-query/?query_string="; + $h2 = " class=\"tab\" target=\"dynamic\" onclick=\"turnBackBold (this);\""; ++ $h3 = " target=\"dynamic\" onclick=\"turnBackBold (this);\""; + ?> + +-Security Onion Website

++Security Onion Website

+ + + + + Connections
+
+ +@@ -102,11 +103,11 @@ function showhide(tspan, tri) { + + DNP3
+
+ + +@@ -114,14 +115,14 @@ function showhide(tspan, tri) { + + DNS
+
+@@ -140,10 +141,10 @@ function showhide(tspan, tri) { + + Firewall
+
+ + +@@ -151,12 +152,12 @@ function showhide(tspan, tri) { + + FTP
+
+ +@@ -174,17 +175,13 @@ function showhide(tspan, tri) { + >Syslog-NG (Program)
+ >Syslog-NG (Host)
+ >Syslog Detected by Bro
+- >Windows Processes
+- >SSH Logins
+- >Autoruns (Drivers)
+- >Autoruns (Hijacks)
+- >Autoruns (Tasks)
+- >Autoruns (Logon)
++ - >Top / >Bottom
++ - >Top / >Bottom
++ Autoruns
++ - >Top / >Bottom
++ - >Top / >Bottom
++ - >Top / >Bottom
++ - >Top / >Bottom
+
+ + +@@ -192,19 +189,19 @@ function showhide(tspan, tri) { + + HTTP
+
+ + +@@ -212,12 +209,12 @@ function showhide(tspan, tri) { + + Intel
+
+ + +@@ -225,10 +222,10 @@ function showhide(tspan, tri) { + + IRC
+
+ + +@@ -236,12 +233,12 @@ function showhide(tspan, tri) { + + Kerberos
+
+ + +@@ -249,11 +246,11 @@ function showhide(tspan, tri) { + + Modbus
+
+ + +@@ -261,11 +258,11 @@ function showhide(tspan, tri) { + + MySQL
+
+ + +@@ -273,9 +270,9 @@ function showhide(tspan, tri) { + + Notice
+
+@@ -374,9 +371,9 @@ function showhide(tspan, tri) { + + Snort/Suricata
+
+ + +@@ -404,16 +401,16 @@ function showhide(tspan, tri) { + + SSL
+
+ + +@@ -439,14 +436,14 @@ function showhide(tspan, tri) { + + X.509
+
+ + diff --git a/debian/patches/series b/debian/patches/series index 862b18d..734eea3 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -45,3 +45,4 @@ change-remaining-http-hyperlinks-to-https securityonion-web-page:-add-queries-for-dnp3-and-modbus-#970 merge-pull-request-from-Josh-Brower-for-autoruns-queries Issue-973:-securityonion-web-page:-Apache-ServerName-localhost +Issue-964:-securityonion-web-page:-add-"bottom"-queries-for-long-tail-analysis diff --git a/elsa/menu.php b/elsa/menu.php index 0a1fbd0..68ba8d0 100644 --- a/elsa/menu.php +++ b/elsa/menu.php @@ -50,13 +50,13 @@ function showhide(tspan, tri) { @media all and (min-width: 0px) and (max-width: 230px) { .tab { font-size:12px; - margin:0px; + margin-left:0px; } } @media all and (min-width: 231px) { .tab { - margin:25px; + margin-left:25px; } } @@ -67,24 +67,25 @@ function showhide(tspan, tri) { /* Define href variables */ $h1 = "/elsa-query/?query_string="; $h2 = " class=\"tab\" target=\"dynamic\" onclick=\"turnBackBold (this);\""; + $h3 = " target=\"dynamic\" onclick=\"turnBackBold (this);\""; ?> -Security Onion Website

+Security Onion Website

Connections

@@ -102,11 +103,11 @@ function showhide(tspan, tri) { DNP3

@@ -114,14 +115,14 @@ function showhide(tspan, tri) { DNS

@@ -140,10 +141,10 @@ function showhide(tspan, tri) { Firewall

@@ -151,12 +152,12 @@ function showhide(tspan, tri) { FTP

@@ -174,17 +175,13 @@ function showhide(tspan, tri) { >Syslog-NG (Program)
>Syslog-NG (Host)
>Syslog Detected by Bro
- >Windows Processes
- >SSH Logins
- >Autoruns (Drivers)
- >Autoruns (Hijacks)
- >Autoruns (Tasks)
- >Autoruns (Logon)
+ - >Top / >Bottom
+ - >Top / >Bottom
+ Autoruns
+ - >Top / >Bottom
+ - >Top / >Bottom
+ - >Top / >Bottom
+ - >Top / >Bottom

@@ -192,19 +189,19 @@ function showhide(tspan, tri) { HTTP

@@ -212,12 +209,12 @@ function showhide(tspan, tri) { Intel

@@ -225,10 +222,10 @@ function showhide(tspan, tri) { IRC

@@ -236,12 +233,12 @@ function showhide(tspan, tri) { Kerberos

@@ -249,11 +246,11 @@ function showhide(tspan, tri) { Modbus

@@ -261,11 +258,11 @@ function showhide(tspan, tri) { MySQL

@@ -273,9 +270,9 @@ function showhide(tspan, tri) { Notice

@@ -374,9 +371,9 @@ function showhide(tspan, tri) { Snort/Suricata

@@ -404,16 +401,16 @@ function showhide(tspan, tri) { SSL

@@ -439,14 +436,14 @@ function showhide(tspan, tri) { X.509