output-filedata.c File Reference

#include "suricata-common.h"
#include "output.h"
#include "output-filedata.h"
#include "app-layer-parser.h"
#include "detect-filemagic.h"
#include "conf.h"
#include "util-profiling.h"
#include "util-validate.h"
#include "util-magic.h"
#include "util-path.h"

Include dependency graph for output-filedata.c:

Go to the source code of this file.

Data Structures
struct	OutputFiledataLogger_

Typedefs
typedef struct OutputFiledataLogger_	OutputFiledataLogger

Functions
int	SCOutputRegisterFiledataLogger (LoggerId id, const char *name, SCFiledataLogger LogFunc, void *initdata, ThreadInitFunc ThreadInit, ThreadDeinitFunc ThreadDeinit)
	Register a file-data logger. More...
	SC_ATOMIC_DECLARE (unsigned int, g_file_store_id)
void	OutputFiledataLogFfc (ThreadVars *tv, OutputFiledataLoggerThreadData *td, Packet *p, AppLayerGetFileState files, void *txv, const uint64_t tx_id, AppLayerTxData *txd, const uint8_t call_flags, const bool file_close, const bool file_trunc, const uint8_t dir)
TmEcode	OutputFiledataLogThreadInit (ThreadVars *tv, OutputFiledataLoggerThreadData **data)
	thread init for the filedata logger This will run the thread init functions for the individual registered loggers More...
TmEcode	OutputFiledataLogThreadDeinit (ThreadVars *tv, OutputFiledataLoggerThreadData *op_thread_data)
void	OutputFiledataLoggerRegister (void)
void	OutputFiledataShutdown (void)

Variables
bool	g_filedata_logger_enabled = false

Detailed Description

Author

Victor Julien victo.nosp@m.r@in.nosp@m.linia.nosp@m.c.ne.nosp@m.t

AppLayer Filedata Logger Output registration functions

Definition in file output-filedata.c.

Typedef Documentation

OutputFiledataLogger

typedef struct OutputFiledataLogger_ OutputFiledataLogger

Function Documentation

OutputFiledataLogFfc()

void OutputFiledataLogFfc	(	ThreadVars *	tv,
		OutputFiledataLoggerThreadData *	td,
		Packet *	p,
		AppLayerGetFileState	files,
		void *	txv,
		const uint64_t	tx_id,
		AppLayerTxData *	txd,
		const uint8_t	call_flags,
		const bool	file_close,
		const bool	file_trunc,
		const uint8_t	dir
	)

Definition at line 124 of file output-filedata.c.

References File_::content_stored, FILE_STATE_CLOSED, FILE_STORE, File_::file_store_id, FILE_STORED, FILE_TRUNCATED, FileApplyTxFlags(), FileCloseFilePtr(), FileDataSize(), FileForceMagic(), FilePrintFlags, File_::flags, File_::next, OUTPUT_FILEDATA_FLAG_CLOSE, OUTPUT_FILEDATA_FLAG_OPEN, SC_ATOMIC_ADD, SCLogDebug, File_::state, and OutputFiledataLoggerThreadData_::store.

Here is the call graph for this function:

OutputFiledataLoggerRegister()

void OutputFiledataLoggerRegister

(

void

)

Definition at line 271 of file output-filedata.c.

References SC_ATOMIC_INIT, and SC_ATOMIC_SET.

OutputFiledataLogThreadDeinit()

TmEcode OutputFiledataLogThreadDeinit	(	ThreadVars *	tv,
		OutputFiledataLoggerThreadData *	op_thread_data
	)

Definition at line 246 of file output-filedata.c.

References OutputFiledataLoggerThreadData_::store.

OutputFiledataLogThreadInit()

TmEcode OutputFiledataLogThreadInit	(	ThreadVars *	tv,
		OutputFiledataLoggerThreadData **	data
	)

thread init for the filedata logger This will run the thread init functions for the individual registered loggers

Definition at line 200 of file output-filedata.c.

References SCCalloc, SCFree, SCLogDebug, and TM_ECODE_FAILED.

OutputFiledataShutdown()

void OutputFiledataShutdown

(

void

)

Definition at line 277 of file output-filedata.c.

SC_ATOMIC_DECLARE()

SC_ATOMIC_DECLARE	(	unsigned int	,
		g_file_store_id
	)

SCOutputRegisterFiledataLogger()

int SCOutputRegisterFiledataLogger	(	LoggerId	id,
		const char *	name,
		SCFiledataLogger	LogFunc,
		void *	initdata,
		ThreadInitFunc	ThreadInit,
		ThreadDeinitFunc	ThreadDeinit
	)

Register a file-data logger.

Parameters

logger_id	An ID used to distinguish this logger from others while profiling.
name	An informational name for this logger. Used only for debugging.
LogFunc	A function that will be called to log each file-data.
initdata	Initialization data that will pass to the ThreadInitFunc.
ThreadInitFunc	Thread initialization function.
ThreadDeinitFunc	Thread de-initialization function.

Return values

0	on success, -1 on failure.

Definition at line 54 of file output-filedata.c.

Variable Documentation

g_filedata_logger_enabled

bool g_filedata_logger_enabled = false

Definition at line 37 of file output-filedata.c.