anti/DECNET
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ui): surface attacker date_hdr in mail table and drawer

Browse Source 
MailDrawer was reading fields.date / from_addr / message_id —
all wrong; actual log field names are date_hdr, from_hdr,
message_id_hdr, to_hdr.  The mail table in AttackerDetail
showed only DECNET capture time and used from_addr instead
of from_hdr.  Add a DATE (attacker) column so the attacker-
supplied Date header (including timezone) is visible at a
glance — useful for correlating campaigns like the Tiscali
run where IPs used distinct TZs (+0800 vs -0700).
This commit is contained in:
anti
2026-04-30 14:11:08 -04:00
parent d0b07bdf52
commit 72498f81b2
2 changed files with 12 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
decnet_web/src/components/AttackerDetail.tsx
View File

@@ -1479,7 +1479,7 @@ const AttackerDetail: React.FC = () => {
}
return (
<div className="dashboard">
<div className="dashboard page-scroll">
{/* Back Button */}
<button onClick={() => navigate('/attackers')} className="back-button">
<ArrowLeft size={18} />
@@ -2059,6 +2059,7 @@ const AttackerDetail: React.FC = () => {
<th>DECKY</th>
<th>SUBJECT</th>
<th>FROM</th>
<th>DATE (attacker)</th>
<th>SIZE</th>
<th></th>
</tr>
@@ -2078,7 +2079,10 @@ const AttackerDetail: React.FC = () => {
{fields.subject || '—'}
</td>
<td className="matrix-text" style={{ fontFamily: 'monospace', wordBreak: 'break-all' }}>
{fields.from_addr || fields.mail_from || '—'}
{fields.from_hdr || fields.from_addr || fields.mail_from || '—'}
</td>
<td className="matrix-text" style={{ fontFamily: 'monospace', whiteSpace: 'nowrap', fontSize: '0.75rem' }}>
{fields.date_hdr || '—'}
</td>
<td className="matrix-text" style={{ fontFamily: 'monospace' }}>
{fields.size ? `${fields.size} B` : '—'}

12
decnet_web/src/components/MailDrawer.tsx
View File

@@ -81,9 +81,9 @@ const MailDrawer: React.FC<MailDrawerProps> = ({ decky, storedAs, fields, onClos
}
};
const recipients = Array.isArray(fields.rcpts)
? fields.rcpts.join(', ')
: (typeof fields.rcpts === 'string' ? fields.rcpts : null);
const recipients = fields.to_hdr
|| (Array.isArray(fields.rcpts) ? fields.rcpts.join(', ') : null)
|| (typeof fields.rcpts === 'string' ? fields.rcpts : null);
return (
<div
@@ -156,10 +156,10 @@ const MailDrawer: React.FC<MailDrawerProps> = ({ decky, storedAs, fields, onClos
HEADERS
</h3>
<Row label="Subject" value={fields.subject} />
<Row label="From" value={fields.from_addr ?? fields.from} />
<Row label="From" value={fields.from_hdr || fields.from_addr || fields.from} />
<Row label="To" value={recipients} />
<Row label="Date" value={fields.date} />
<Row label="Message-ID" value={fields.message_id} />
<Row label="Date" value={fields.date_hdr || fields.date} />
<Row label="Message-ID" value={fields.message_id_hdr || fields.message_id} />
<Row label="Mail from" value={fields.mail_from} />
</section>