Go to the documentation of this file.
54 #define MODULE_NAME "LogSshLog"
70 Flow *f,
void *state,
void *txptr, uint64_t tx_id)
88 jb_open_object(js,
"ssh");
89 if (!rs_ssh_log_json(txptr, js)) {
100 static TmEcode JsonSshLogThreadInit(
ThreadVars *t,
const void *initdata,
void **data)
102 if (initdata == NULL) {
103 SCLogDebug(
"Error getting context for EveLogSSH. \"initdata\" argument NULL");
115 if (aft->
buffer == NULL) {
128 if (aft->
buffer != NULL) {
150 static void OutputSshLogDeinitSub(
OutputCtx *output_ctx)
175 output_ctx->
data = ssh_ctx;
176 output_ctx->
DeInit = OutputSshLogDeinitSub;
180 result.
ctx = output_ctx;
189 "eve-log",
"JsonSshLog",
"eve-log.ssh",
OutputJsonCommonSettings cfg
struct JsonSshLogThread_ JsonSshLogThread
#define JSON_OUTPUT_BUFFER_SIZE
int OutputJsonBuilderBuffer(JsonBuilder *js, LogFileCtx *file_ctx, MemBuffer **buffer)
void EveAddCommonOptions(const OutputJsonCommonSettings *cfg, const Packet *p, const Flow *f, JsonBuilder *js)
void JsonSshLogRegister(void)
int SSHTxLogCondition(ThreadVars *tv, const Packet *p, void *state, void *tx, uint64_t tx_id)
void AppLayerParserRegisterLogger(uint8_t ipproto, AppProto alproto)
Per thread variable structure.
OutputJsonCommonSettings cfg
LogFileCtx * LogFileEnsureExists(LogFileCtx *parent_ctx, int thread_id)
LogFileEnsureExists() Ensure a log file context for the thread exists.
OutputSshCtx * sshlog_ctx
void OutputRegisterTxSubModuleWithCondition(LoggerId id, const char *parent_name, const char *name, const char *conf_name, OutputInitSubFunc InitFunc, AppProto alproto, TxLogger TxLogFunc, TxLoggerCondition TxLogCondition, ThreadInitFunc ThreadInit, ThreadDeinitFunc ThreadDeinit, ThreadExitPrintStatsFunc ThreadExitPrintStats)
#define MemBufferReset(mem_buffer)
Reset the mem buffer.
void(* DeInit)(struct OutputCtx_ *)
void MemBufferFree(MemBuffer *buffer)
struct OutputSshCtx_ OutputSshCtx
JsonBuilder * CreateEveHeaderWithTxId(const Packet *p, enum OutputJsonLogDirection dir, const char *event_type, JsonAddrInfo *addr, uint64_t tx_id)
MemBuffer * MemBufferCreateNew(uint32_t size)