suricata
output-json.c File Reference
#include "suricata-common.h"
#include "debug.h"
#include "detect.h"
#include "flow.h"
#include "conf.h"
#include "threads.h"
#include "tm-threads.h"
#include "threadvars.h"
#include "util-debug.h"
#include "util-unittest.h"
#include "util-unittest-helper.h"
#include "detect-parse.h"
#include "detect-engine.h"
#include "detect-engine-mpm.h"
#include "detect-reference.h"
#include "app-layer-parser.h"
#include "util-classification-config.h"
#include "util-syslog.h"
#include "output.h"
#include "output-json.h"
#include "util-byte.h"
#include "util-privs.h"
#include "util-print.h"
#include "util-proto-name.h"
#include "util-optimize.h"
#include "util-buffer.h"
#include "util-logopenfile.h"
#include "util-log-redis.h"
#include "util-device.h"
#include "util-validate.h"
#include "util-crypt.h"
#include "flow-var.h"
#include "flow-bit.h"
#include "source-pcap-file.h"
Include dependency graph for output-json.c:

Go to the source code of this file.

Functions

int OutputJsonOpenFileCtx (LogFileCtx *, char *)
 
void OutputJsonRegister (void)
 

Detailed Description

Author
Tom DeCanio td@np.nosp@m.ulse.nosp@m.tech..nosp@m.com

Logs detection and monitoring events in JSON format.

Definition in file output-json.c.

Function Documentation

int OutputJsonOpenFileCtx ( LogFileCtx ,
char *   
)

Handle the case where no JSON support is compiled in.

void OutputJsonRegister ( void  )

Definition at line 77 of file output-json.c.

References __attribute__, Base64Encode(), MemBuffer_::buffer, ByteExtractStringUint16(), ByteExtractStringUint64(), ICMPV6Hdr_::code, ComputeSHA1(), ConfGet(), ConfNodeLookupChild(), ConfNodeLookupChildValue(), ConfValIsFalse(), ConfValIsTrue(), CreateIsoTimeString(), OutputInitResult_::ctx, FlowVar_::data, OutputCtx_::data, Packet_::datalink, FlowVar_::datatype, DEBUG_VALIDATE_BUG_ON, DEFAULT_ALERT_SYSLOG_FACILITY, DEFAULT_ALERT_SYSLOG_FACILITY_STR, DEFAULT_LOG_FILENAME, OutputCtx_::DeInit, DETECT_FLOWBITS, DETECT_FLOWINT, DETECT_FLOWVAR, LiveDevice_::dev, Flow_::dp, Packet_::dp, Flow_::dst, dst, event_type, flags, Flow_::flags, Packet_::flow, FLOW_IPV4, FLOW_IPV6, Flow_::flowvar, FLOWVAR_TYPE_INT, FLOWVAR_TYPE_STR, FlowVar_::fv_int, FlowVar_::fv_str, GET_IPV4_DST_ADDR_PTR, GET_IPV4_SRC_ADDR_PTR, GET_IPV6_DST_ADDR, GET_IPV6_SRC_ADDR, GET_PKT_DATA, GET_PKT_LEN, HttpXFFGetCfg(), Flow_::icmp_d, Flow_::icmp_s, Packet_::icmpv4h, Packet_::icmpv6h, PktVar_::id, FlowBit_::idx, FlowVar_::idx, IP_GET_IPPROTO, LogFileCtx_::is_pcap_offline, LogFileCtx_::json_flags, FlowVar_::key, PktVar_::key, PktVar_::key_len, FlowVar_::keylen, known_proto, len, likely, Packet_::livedev, LOGFILE_TYPE_FILE, LOGFILE_TYPE_REDIS, LOGFILE_TYPE_SYSLOG, LOGFILE_TYPE_UNIX_DGRAM, LOGFILE_TYPE_UNIX_STREAM, LogFileFreeCtx(), LogFileNewCtx(), LogFileWrite(), MEMBUFFER_OFFSET, MEMBUFFER_SIZE, MemBufferExpand(), MemBufferWriteRaw, MODULE_NAME, GenericVar_::next, PktVar_::next, offset, OutputInitResult_::ok, openlog, OutputJsonRegister(), OutputRegisterFileRotationFlag(), OutputRegisterModule(), pad0, Flow_::parent_id, Packet_::pcap_cnt, PcapFileGetFilename(), PKT_IS_IPV4, PKT_IS_IPV6, PKT_IS_TOCLIENT, PKT_IS_TOSERVER, Packet_::pktvar, LogFileCtx_::prefix, LogFileCtx_::prefix_len, PrintBufferData, PrintInet(), PrintStringsToBuffer(), proto, Flow_::proto, Packet_::proto, RUNMODE_PCAP_FILE, RunmodeGetCurrent(), SC_BASE64_OK, SC_ERR_DEPRECATED_CONF, SC_ERR_INVALID_ARGUMENT, SC_ERR_MEM_ALLOC, SC_WARN_EVENT_DROPPED, SCCalloc, SCConfLogOpenGeneric(), SCFree, SCLogDebug, SCLogError, SCLogInfo, SCLogWarning, SCMapEnumNameToValue(), SCProtoNameValid(), SCStrdup, SCSyslogGetFacilityMap(), SCSyslogGetLogLevelMap(), LogFileCtx_::sensor_name, Flow_::sp, Packet_::sp, Flow_::src, src, str, strlcpy(), TH_ACK, TH_CWR, TH_ECN, TH_FIN, TH_PUSH, TH_RST, TH_SYN, TH_URG, TM_ECODE_OK, TRUE, Packet_::ts, tx_id, GenericVar_::type, ICMPV6Hdr_::type, unlikely, ConfNode_::val, FlowVarTypeStr::value, FlowVarTypeInt_::value, PktVar_::value, FlowVarTypeStr::value_len, PktVar_::value_len, VAR_TYPE_FLOW_BIT, VAR_TYPE_FLOW_INT, VAR_TYPE_FLOW_VAR, VAR_TYPE_PKT_VAR, VarNameStoreLookupById(), Packet_::vlan_id, and Packet_::vlan_idx.

Referenced by OutputJsonRegister(), and OutputRegisterLoggers().

Here is the call graph for this function:

Here is the caller graph for this function: