SELECT COUNT(t1.text)||' x '||t1.text AS "Classification",
t7.severity,
t7.completion,
CASE WHEN (t2.address IS NULL) THEN CASE WHEN (t3.address IS NULL) THEN 'n/a' ELSE '127.0.0.1' END ELSE t2.address END AS "Source Addr",
CASE WHEN t3.address IS NULL THEN (SELECT path FROM Prelude_File AS t8 LEFT JOIN Prelude_Alert AS top ON (t8._message_ident = top._ident) WHERE t8._parent0_index = -1 AND t8._index = -1) ELSE t3.address END AS "Target Addr",
t5.iana_protocol_number AS "Protocol",
MIN(t4.port) AS "Source Port",
t5.port AS "Target Port",
t6.name AS "Sensor",
MIN(t0.time),
MAX(t0.time)
FROM Prelude_Classification AS t1
LEFT JOIN Prelude_Address AS t2 ON (t2._parent_type = 'S' AND t1._message_ident = t2._message_ident AND t2._parent0_index = -1 AND t2._index = -1)
LEFT JOIN Prelude_Address AS t3 ON (t3._parent_type = 'T' AND t1._message_ident = t3._message_ident AND t3._parent0_index = -1 AND t3._index = -1)
LEFT JOIN Prelude_Service AS t4 ON (t4._message_ident = t1._message_ident AND t4._parent_type='S' AND t4._parent0_index = -1)
LEFT JOIN Prelude_Service AS t5 ON (t5._message_ident = t1._message_ident AND t5._parent_type='T' AND t5._parent0_index = -1)
LEFT JOIN Prelude_Analyzer AS t6 ON (t6._message_ident = t1._message_ident AND t6._parent_type = 'A' AND t6._index = -1)
LEFT JOIN Prelude_Impact AS t7 ON (t7._message_ident = t1._message_ident)
LEFT JOIN Prelude_CreateTime AS t0 ON (t0._message_ident = t1._message_ident AND t0._parent_type = 'A')
WHERE t2.address IS NULL AND t3.address = '127.0.0.1' GROUP BY t1.text, t2.address, t3.address, t5.iana_protocol_number, t5.port, t6.name, t7.severity, t7.completion ORDER BY 10 ASC
e-REdING. Biblioteca de la Escuela Superior de Ingenieros de Sevilla.
