spo_alert_syslog.c File Reference

#include <sys/types.h>
#include <syslog.h>
#include <stdlib.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include "decode.h"
#include "event.h"
#include "rules.h"
#include "plugbase.h"
#include "spo_plugbase.h"
#include "debug.h"
#include "parser.h"
#include "mstring.h"
#include "util.h"
#include "snort.h"

Go to the source code of this file.

Defines
#define	SYSLOG_BUF   1024
Typedefs
typedef _SyslogData	SyslogData
Functions
void	AlertSyslogInit (u_char *)
SyslogData *	ParseSyslogArgs (char *)
void	AlertSyslog (Packet *, char *, void *, Event *)
void	AlertSyslogCleanExit (int, void *)
void	AlertSyslogRestart (int, void *)
void	AlertSyslogSetup (void)
Variables
OptTreeNode *	otn_tmp

---

Define Documentation

#define SYSLOG_BUF   1024

Referenced by AlertSyslog().

---

Typedef Documentation

typedef struct _SyslogData SyslogData

---

Function Documentation

void AlertSyslog (  Packet *  , char *  , void *  , Event *  )

Definition at line 504 of file spo_alert_syslog.c. References _progvars::alert_interface_flag, bzero, _SigInfo::classType, _Packet::dp, _Packet::frag_flag, _progvars::interface, _IPHdr::ip_dst, _IPHdr::ip_proto, _IPHdr::ip_src, _Packet::iph, _ClassType::name, NULL, PRINT_INTERFACE, _SyslogData::priority, _SigInfo::priority, protocol_names, pv, _Event::sig_generator, _Event::sig_id, _Event::sig_rev, _OptTreeNode::sigInfo, snprintf, _Packet::sp, STD_BUF, strlcat(), strlcpy, syslog(), and SYSLOG_BUF. Referenced by AlertSyslogInit().

void AlertSyslogCleanExit (  int  , void *  )

Definition at line 611 of file spo_alert_syslog.c. References DEBUG_LOG, and DEBUG_WRAP. Referenced by AlertSyslogInit().

void AlertSyslogInit (  u_char *   )

Definition at line 117 of file spo_alert_syslog.c. References AddFuncToCleanExitList(), AddFuncToOutputList(), AddFuncToRestartList(), _progvars::alert_plugin_active, AlertSyslog(), AlertSyslogCleanExit(), AlertSyslogRestart(), _progvars::daemon_flag, DEBUG_INIT, DEBUG_WRAP, _SyslogData::facility, LOG_PID, NT_OUTPUT_ALERT, openlog(), _SyslogData::options, ParseSyslogArgs(), and pv. Referenced by AlertSyslogSetup().

void AlertSyslogRestart (  int  , void *  )

Definition at line 619 of file spo_alert_syslog.c. References DEBUG_LOG, and DEBUG_WRAP. Referenced by AlertSyslogInit().

void AlertSyslogSetup (  void   )

Definition at line 97 of file spo_alert_syslog.c. References AlertSyslogInit(), DEBUG_INIT, DEBUG_WRAP, NT_OUTPUT_ALERT, and RegisterOutputPlugin(). Referenced by InitOutputPlugins().

SyslogData * ParseSyslogArgs (  char *   )

Definition at line 155 of file spo_alert_syslog.c. References DEBUG_INIT, DEBUG_WRAP, _SyslogData::facility, FatalError(), file_line, file_name, LOG_ALERT, LOG_AUTH, LOG_AUTHPRIV, LOG_CONS, LOG_CRIT, LOG_DAEMON, LOG_DEBUG, LOG_EMERG, LOG_ERR, LOG_INFO, LOG_LOCAL0, LOG_LOCAL1, LOG_LOCAL2, LOG_LOCAL3, LOG_LOCAL4, LOG_LOCAL5, LOG_LOCAL6, LOG_LOCAL7, LOG_NDELAY, LOG_NOTICE, LOG_NOWAIT, LOG_PERROR, LOG_PID, LOG_USER, LOG_WARNING, LogMessage(), mSplit(), mSplitFree(), NULL, _SyslogData::options, _SyslogData::priority, pv, SnortAlloc(), STD_BUF, strcasecmp, and VarGet(). Referenced by AlertSyslogInit().

---

Variable Documentation

OptTreeNode* otn_tmp

Definition at line 80 of file parser.c.

---