suricata
|
#include "suricata-common.h"
#include "debug.h"
#include "detect.h"
#include "pkt-var.h"
#include "conf.h"
#include "threadvars.h"
#include "tm-modules.h"
#include "threads.h"
#include "app-layer-parser.h"
#include "detect-filemagic.h"
#include "stream.h"
#include "util-print.h"
#include "util-unittest.h"
#include "util-privs.h"
#include "util-debug.h"
#include "util-atomic.h"
#include "util-file.h"
#include "util-time.h"
#include "util-buffer.h"
#include "util-byte.h"
#include "util-validate.h"
#include "util-logopenfile.h"
#include "output.h"
#include "output-json.h"
#include "output-json-file.h"
#include "output-json-http.h"
#include "output-json-smtp.h"
#include "output-json-email-common.h"
#include "output-json-nfs.h"
#include "output-json-smb.h"
#include "app-layer-htp.h"
#include "app-layer-htp-xff.h"
#include "util-memcmp.h"
#include "stream-tcp-reassemble.h"
Go to the source code of this file.
Data Structures | |
struct | OutputFileCtx_ |
struct | JsonFileLogThread_ |
Typedefs | |
typedef struct OutputFileCtx_ | OutputFileCtx |
typedef struct JsonFileLogThread_ | JsonFileLogThread |
Functions | |
json_t * | JsonBuildFileInfoRecord (const Packet *p, const File *ff, const bool stored, uint8_t dir, HttpXFFCfg *xff_cfg) |
void | JsonFileLogRegister (void) |
Log files we track.
Definition in file output-json-file.c.
typedef struct JsonFileLogThread_ JsonFileLogThread |
typedef struct OutputFileCtx_ OutputFileCtx |
json_t* JsonBuildFileInfoRecord | ( | const Packet * | p, |
const File * | ff, | ||
const bool | stored, | ||
uint8_t | dir, | ||
HttpXFFCfg * | xff_cfg | ||
) |
Definition at line 83 of file output-json-file.c.
References Flow_::alproto, ALPROTO_HTTP, ALPROTO_NFS, ALPROTO_SMB, ALPROTO_SMTP, AppProtoToString(), JsonFileLogThread_::buffer, BUG_ON, BytesToStringBuffer(), ConfNodeLookupChild(), ConfNodeLookupChildValue(), ConfValIsTrue(), CreateJSONHeader(), OutputInitResult_::ctx, OutputCtx_::data, DEBUG_VALIDATE_BUG_ON, OutputCtx_::DeInit, File_::end, OutputFileCtx_::file_ctx, OutputJsonCtx_::file_ctx, FILE_HAS_GAPS, FILE_LOGGED, FILE_MD5, FILE_SHA1, FILE_SHA256, FILE_STATE_CLOSED, FILE_STATE_ERROR, FILE_STATE_TRUNCATED, File_::file_store_id, FILE_STORED, FileForceFilestoreEnable(), FileForceHashParseCfg(), FileForceMagicEnable(), FileForceTrackingEnable(), JsonFileLogThread_::filelog_ctx, FileTrackedSize(), HttpXFFCfg_::flags, File_::flags, Packet_::flow, FLOW_PKT_TOCLIENT, Packet_::flowflags, FlowGetAppProtocol(), HttpXFFGetCfg(), HttpXFFGetIPFromTx(), json_boolean, JSON_OUTPUT_BUFFER_SIZE, JsonBuildFileInfoRecord(), JsonEmailAddMetadata(), JsonHttpAddMetadata(), JsonNFSAddMetadata(), JsonNFSAddMetadataRPC(), JsonSMBAddMetadata(), JsonSMTPAddMetadata(), LOG_DIR_FLOW, LOG_DIR_FLOW_TOCLIENT, LOG_DIR_FLOW_TOSERVER, MemBufferCreateNew(), MemBufferFree(), MemBufferReset, File_::name, File_::name_len, OutputInitResult_::ok, OutputJSONBuffer(), OutputFileCtx_::parent_xff_cfg, SCCalloc, SCEnter, SCFree, SCJsonString(), SCLogDebug, SCMalloc, File_::sid, File_::sid_cnt, File_::start, File_::state, str, STREAM_TOCLIENT, STREAM_TOSERVER, TM_ECODE_FAILED, TM_ECODE_OK, File_::txid, unlikely, OutputFileCtx_::xff_cfg, OutputJsonCtx_::xff_cfg, XFF_DISABLED, XFF_EXTRADATA, XFF_MAXLEN, and XFF_OVERWRITE.
Referenced by JsonBuildFileInfoRecord().
void JsonFileLogRegister | ( | void | ) |
Definition at line 393 of file output-json-file.c.
References LOGGER_JSON_FILE, and OutputRegisterFileSubModule().
Referenced by OutputRegisterLoggers().