File: bayes_train_ham.lua

package info (click to toggle)
modsecurity-crs 2.2.9-1+deb8u1
  • links: PTS
  • area: main
  • in suites: jessie
  • size: 3,064 kB
  • ctags: 219
  • sloc: perl: 1,002; ansic: 727; ruby: 69; makefile: 18
file content (34 lines) | stat: -rwxr-xr-x 957 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
#!/usr/bin/lua
require("io");

function main()
local mf = require "moonfilter"
-- define the classes to use
mf.classes("/var/log/httpd/spam", "/var/log/httpd/ham")
-- create ham+spam DB on disk -- this is only necessary the first time
-- mf.create()

local score = ""
local value = "" 

local args = {};
args = m.getvars("ARGS", {"none"});
  if (#args == 0) then
        m.log(4, "# of ARGS: " ..#args.. ".");
        return nil;
  end
     -- Place ARGS data into key/value pairs for inspection
    for k,v in pairs(args) do
	name = v["name"];
	value = v["value"];
	m.log(4, "Arg Name: " ..name.. " and Arg Value: " ..value.. ".");
	mf.text = value;
	local train_result = mf.train("/var/log/httpd/ham")

    end
-- return nil;
 m.log(4, "Low Bayesian Score: " .. score .. ". Training payloads as non-malicious.")
 m.setvar("tx.bayes_msg", "Training payload as ham: " .. value .. ".");
 return ("Training payloads as non-malicious: " .. value .. ".");

end