SELECT COUNT(tlast._ident) AS "Alerts" , t1.text AS "Classification" , t7.severity AS "Severity" , CASE WHEN (t2.address IS NULL) THEN CASE WHEN t3.address IS NULL THEN 'n/a' ELSE '127.0.0.1' END WHEN (t2.address = ' ') THEN '127.0.0.1 ' ELSE t2.address END AS "Source Addr" , CASE WHEN t3.address IS NULL THEN (SELECT path FROM Prelude_File AS t8 LEFT JOIN Prelude_Alert AS top ON (t8._message_ident = top._ident) WHERE t8._parent0_index = -1 AND t8._index = -1 GROUP BY 1) ELSE t3.address END AS "Target Addr" , t6.name AS "Sensor" , MIN(t0.time) AS "FTS" , MAX(t0.time) AS "LTS"
FROM Prelude_Alert AS top
LEFT JOIN Prelude_Classification AS t1 ON ( top._ident = t1._message_ident)
LEFT JOIN Prelude_Address AS t2 ON ( top._ident = t2._message_ident AND t2._parent_type = 'S' AND t2._parent0_index = -1 AND t2._index = -1)
LEFT JOIN Prelude_Address AS t3 ON ( top._ident = t3._message_ident AND t3._parent_type = 'T' AND t3._parent0_index = -1 AND t3._index = -1)
LEFT JOIN Prelude_Analyzer AS t6 ON ( top._ident = t6._message_ident AND t6._parent_type = 'A' AND t6._index = -1)
LEFT JOIN Prelude_Impact AS t7 ON ( top._ident = t7._message_ident)
LEFT JOIN Prelude_CreateTime AS t0 ON (t0.time >= '2006-02-10 10:50:00.0' AND t0.time <= '2006-02-13 12:08:00.0' AND t0._message_ident = top._ident AND t0._parent_type = 'A')
LEFT JOIN Prelude_Alert AS tlast ON ( t0.time >= '2006-02-10 10:50:00.0' AND t0.time <= '2006-02-13 12:08:00.0' AND ((t2.address = ' ') AND (t3.address = '192.168.100.72') ) AND top._ident = tlast._ident)
GROUP BY 2, 3, 4, 5, 6
EXCEPT
SELECT COUNT(tlast._ident) AS "Alerts" , t1.text AS "Classification" , t7.severity AS "Severity" , CASE WHEN (t2.address IS NULL) THEN CASE WHEN t3.address IS NULL THEN 'n/a' ELSE '127.0.0.1' END WHEN (t2.address = ' ') THEN '127.0.0.1 ' ELSE t2.address END AS "Source Addr" , CASE WHEN t3.address IS NULL THEN (SELECT path FROM Prelude_File AS t8 LEFT JOIN Prelude_Alert AS top ON (t8._message_ident = top._ident) WHERE t8._parent0_index = -1 AND t8._index = -1 GROUP BY 1) ELSE t3.address END AS "Target Addr" , t6.name AS "Sensor" , MIN(t0.time) AS "FTS" , MAX(t0.time) AS "LTS"
FROM Prelude_Alert AS top
LEFT JOIN Prelude_Classification AS t1 ON ( top._ident = t1._message_ident)
LEFT JOIN Prelude_Address AS t2 ON ( top._ident = t2._message_ident AND t2._parent_type = 'S' AND t2._parent0_index = -1 AND t2._index = -1)
LEFT JOIN Prelude_Address AS t3 ON ( top._ident = t3._message_ident AND t3._parent_type = 'T' AND t3._parent0_index = -1 AND t3._index = -1)
LEFT JOIN Prelude_Analyzer AS t6 ON ( top._ident = t6._message_ident AND t6._parent_type = 'A' AND t6._index = -1)
LEFT JOIN Prelude_Impact AS t7 ON ( top._ident = t7._message_ident)
LEFT JOIN Prelude_CreateTime AS t0 ON (t0.time >= '2006-02-10 10:50:00.0' AND t0.time <= '2006-02-13 12:08:00.0' AND t0._message_ident = top._ident AND t0._parent_type = 'A')
LEFT JOIN Prelude_Alert AS tlast ON (tlast._ident is null AND top._ident = tlast._ident)
GROUP BY 2, 3, 4, 5, 6
ORDER BY 8 DESC
e-REdING. Biblioteca de la Escuela Superior de Ingenieros de Sevilla.
