From d944892a0c4d04c056a8697fc0aee54b5b01ff88 Mon Sep 17 00:00:00 2001
From: William Heimbigner <william.heimbigner@gmail.com>
Date: Thu, 28 Jun 2007 17:54:10 +0000
Subject: check gecos, record gecos, inspect gecos, and more hilights

---
 modules/inspect.pl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'modules/inspect.pl')

diff --git a/modules/inspect.pl b/modules/inspect.pl
index 76b520f..666de29 100644
--- a/modules/inspect.pl
+++ b/modules/inspect.pl
@@ -10,7 +10,7 @@ sub inspect {
   our ($conn, $event) = @_;
   my (%conx, %monx);
   our (%aonx, %dct, $rev, $chan, $id);
-  %aonx=(); %dct=(); $rev; $chan=""; $id="";
+  %aonx=(); %dct=(); $chan=""; $id="";
   my (@dnsbl, @unpakt, @uniq, @cut);
   my ($match, $txtz, $iaddr);
   my @override = [];
@@ -44,7 +44,7 @@ sub inspect {
   delete $dct{$_} foreach @override;
   foreach $chan (@{$event->{to}}) {
     foreach $id ( keys %dct ) {
-      sql_record($chan, $event->{nick}, $event->{user}, $event->{host}, $dct{$id}{risk}, $id, $dct{$id}{reason});
+      sql_record($chan, $event->{nick}, $event->{user}, $event->{host}, $::sn{lc $event->{nick}}->{gecos}, $dct{$id}{risk}, $id, $dct{$id}{reason});
       $txtz = "$dct{$id}{risk} risk threat: ".
               "Detected $event->{nick} $dct{$id}{reason} in $chan ";
       $txtz = $txtz . commaAndify(getAlert(lc $chan, $dct{$id}{risk}, 'hilights')) if (getAlert(lc $chan, $dct{$id}{risk}, 'hilights'));
-- 
cgit v1.2.3