re-add timezone offset

con-cis · Aug 21, 2024 · 77382ca · 77382ca
1 parent b876589
commit 77382ca
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/README.md b/README.md
@@ -60,7 +60,7 @@ Options:
   -t, --test                 Run in test mode (send a test notification)
   -e, --eve-json <file>      Specify the Suricata EVE JSON log file (default: /var/log/suricata/eve.json)
   -l, --line-length <length> Set the maximum line length for reading the log file (default: 4096)
-  -z, --timezone-offset <s>  Set the timezone offset in seconds (default: 3600)
+  -z, --timezone-offset <s>  Set the timezone offset in seconds (default: 0)
   -w, --alert-window <s>     Set the alert window in seconds (default: 60)
 ```
 

diff --git a/suricata-notify.c b/suricata-notify.c
@@ -12,7 +12,7 @@
 #include <sys/wait.h>
 
 #define DEFAULT_MAX_LINE_LENGTH 4096
-#define DEFAULT_TIMEZONE_OFFSET_SECONDS 3600
+#define DEFAULT_TIMEZONE_OFFSET_SECONDS 0
 #define DEFAULT_ALERT_WINDOW_SECONDS 60
 
 // Global variables for configuration
@@ -93,7 +93,7 @@ time_t convert_iso8601_to_unix(const char *iso8601_timestamp)
     }
 
     // Convert to time_t (Unix timestamp)
-    time_t converted_time = mktime(&tm_time);
+    time_t converted_time = mktime(&tm_time) + timezone_offset_seconds;
 
     if (verbose)
     {
@@ -103,6 +103,7 @@ time_t convert_iso8601_to_unix(const char *iso8601_timestamp)
     return converted_time;
 }
 
+// Function to get ISO 8601 timestamp
 void get_iso8601_timestamp(char *buffer, size_t buffer_size)
 {
     struct timeval tv;
@@ -118,6 +119,7 @@ void get_iso8601_timestamp(char *buffer, size_t buffer_size)
     snprintf(buffer + strlen(buffer), buffer_size - strlen(buffer), ".%06ld+0000", tv.tv_usec);
 }
 
+// Sanitize file inputs
 int sanitize_file_input(const char *log_file)
 {
     if (log_file == NULL)