#include "suricata-common.h"#include "detect.h"#include "pkt-var.h"#include "conf.h"#include "threads.h"#include "threadvars.h"#include "tm-threads.h"#include "util-print.h"#include "util-unittest.h"#include "util-debug.h"#include "output.h"#include "log-tlslog.h"#include "app-layer-ssl.h"#include "app-layer.h"#include "app-layer-parser.h"#include "util-privs.h"#include "util-buffer.h"#include "util-logopenfile.h"#include "util-time.h"#include "log-cf-common.h"
Go to the source code of this file.
Data Structures | |
| struct | LogTlsFileCtx_ |
| struct | LogTlsLogThread_ |
Macros | |
| #define | DEFAULT_LOG_FILENAME "tls.log" |
| #define | MODULE_NAME "LogTlsLog" |
| #define | PRINT_BUF_LEN 46 |
| #define | OUTPUT_BUFFER_SIZE 65535 |
| #define | CERT_ENC_BUFFER_SIZE 2048 |
| #define | LOG_TLS_DEFAULT 0 |
| #define | LOG_TLS_EXTENDED 1 |
| #define | LOG_TLS_CUSTOM 2 |
| #define | LOG_TLS_SESSION_RESUMPTION 4 |
| #define | LOG_TLS_CF_VERSION 'v' |
| #define | LOG_TLS_CF_DATE_NOT_BEFORE 'd' |
| #define | LOG_TLS_CF_DATE_NOT_AFTER 'D' |
| #define | LOG_TLS_CF_SHA1 'f' |
| #define | LOG_TLS_CF_SNI 'n' |
| #define | LOG_TLS_CF_SUBJECT 's' |
| #define | LOG_TLS_CF_ISSUER 'i' |
| #define | LOG_TLS_CF_EXTENDED 'E' |
Typedefs | |
| typedef struct LogTlsFileCtx_ | LogTlsFileCtx |
| typedef struct LogTlsLogThread_ | LogTlsLogThread |
Functions | |
| int | TLSGetIPInformations (const Packet *p, char *srcip, size_t srcip_len, Port *sp, char *dstip, size_t dstip_len, Port *dp, int ipproto) |
| void | LogTlsLogRegister (void) |
Detailed Description
Implements TLS logging portion of the engine.
Definition in file log-tlslog.c.
Macro Definition Documentation
◆ CERT_ENC_BUFFER_SIZE
| #define CERT_ENC_BUFFER_SIZE 2048 |
Definition at line 63 of file log-tlslog.c.
◆ DEFAULT_LOG_FILENAME
| #define DEFAULT_LOG_FILENAME "tls.log" |
Definition at line 56 of file log-tlslog.c.
◆ LOG_TLS_CF_DATE_NOT_AFTER
| #define LOG_TLS_CF_DATE_NOT_AFTER 'D' |
Definition at line 73 of file log-tlslog.c.
◆ LOG_TLS_CF_DATE_NOT_BEFORE
| #define LOG_TLS_CF_DATE_NOT_BEFORE 'd' |
Definition at line 72 of file log-tlslog.c.
◆ LOG_TLS_CF_EXTENDED
| #define LOG_TLS_CF_EXTENDED 'E' |
Definition at line 78 of file log-tlslog.c.
◆ LOG_TLS_CF_ISSUER
| #define LOG_TLS_CF_ISSUER 'i' |
Definition at line 77 of file log-tlslog.c.
◆ LOG_TLS_CF_SHA1
| #define LOG_TLS_CF_SHA1 'f' |
Definition at line 74 of file log-tlslog.c.
◆ LOG_TLS_CF_SNI
| #define LOG_TLS_CF_SNI 'n' |
Definition at line 75 of file log-tlslog.c.
◆ LOG_TLS_CF_SUBJECT
| #define LOG_TLS_CF_SUBJECT 's' |
Definition at line 76 of file log-tlslog.c.
◆ LOG_TLS_CF_VERSION
| #define LOG_TLS_CF_VERSION 'v' |
Definition at line 71 of file log-tlslog.c.
◆ LOG_TLS_CUSTOM
| #define LOG_TLS_CUSTOM 2 |
Definition at line 67 of file log-tlslog.c.
◆ LOG_TLS_DEFAULT
| #define LOG_TLS_DEFAULT 0 |
Definition at line 65 of file log-tlslog.c.
◆ LOG_TLS_EXTENDED
| #define LOG_TLS_EXTENDED 1 |
Definition at line 66 of file log-tlslog.c.
◆ LOG_TLS_SESSION_RESUMPTION
| #define LOG_TLS_SESSION_RESUMPTION 4 |
Definition at line 69 of file log-tlslog.c.
◆ MODULE_NAME
| #define MODULE_NAME "LogTlsLog" |
Definition at line 58 of file log-tlslog.c.
◆ OUTPUT_BUFFER_SIZE
| #define OUTPUT_BUFFER_SIZE 65535 |
Definition at line 62 of file log-tlslog.c.
◆ PRINT_BUF_LEN
| #define PRINT_BUF_LEN 46 |
Definition at line 60 of file log-tlslog.c.
Typedef Documentation
◆ LogTlsFileCtx
| typedef struct LogTlsFileCtx_ LogTlsFileCtx |
◆ LogTlsLogThread
| typedef struct LogTlsLogThread_ LogTlsLogThread |
Function Documentation
◆ LogTlsLogRegister()
| void LogTlsLogRegister | ( | void | ) |
Definition at line 525 of file log-tlslog.c.
References LOGGER_TLS, MODULE_NAME, and OutputRegisterTxModuleWithProgress().
◆ TLSGetIPInformations()
| int TLSGetIPInformations | ( | const Packet * | p, |
| char * | srcip, | ||
| size_t | srcip_len, | ||
| Port * | sp, | ||
| char * | dstip, | ||
| size_t | dstip_len, | ||
| Port * | dp, | ||
| int | ipproto | ||
| ) |
Definition at line 95 of file log-tlslog.c.
References Packet_::dp, GET_IPV4_DST_ADDR_PTR, GET_IPV4_SRC_ADDR_PTR, GET_IPV6_DST_ADDR, GET_IPV6_SRC_ADDR, PKT_IS_TOSERVER, PrintInet(), and Packet_::sp.
