Changeset 265 for trunk/include


Ignore:
Timestamp:
Dec 21, 2009, 8:54:07 PM (15 years ago)
Author:
katerina
Message:

Enhance logfile monitoring (tickets #183, #184, #185).

Location:
trunk/include
Files:
3 added
7 edited

Legend:

Unmodified
Added
Removed

  • trunk/include/samhain.h

    r256 r265  
    106106#ifdef HAVE_STDINT_H
    107107#include <stdint.h>
     108#endif
     109
     110#if !defined(HAVE_UINT16_T)
     111#define UINT16 unsigned short
     112#else
     113#define UINT16 uint16_t
    108114#endif
    109115

  • trunk/include/sh_cat.h

    r260 r265  
    168168 MSG_LOGMON_SUM,
    169169 MSG_LOGMON_COR,
     170 MSG_LOGMON_MARK,
     171 MSG_LOGMON_BURST,
    170172#endif
    171173

  • trunk/include/sh_error.h

    r170 r265  
    109109void sh_error_fixup(void);
    110110
    111 /* convert a string to a numeric priority
    112  */
    113 int sh_error_convert_level (const char * str_s);
    114 
    115111/* only to stderr (GOOD/BAD)
    116112 */

  • trunk/include/sh_error_min.h

    r170 r265  
    2525                      long errnum, unsigned long  msg_index, ...);
    2626
     27/* convert a string to a numeric priority
     28 */
     29int sh_error_convert_level (const char * str_s);
     30
    2731#endif

  • trunk/include/sh_log_evalrule.h

    r260 r265  
    3939int sh_eval_process_msg(struct sh_logrecord * record);
    4040
    41 /* Match correlated rules
    42  */
    43 void sh_keep_match();
     41enum policies {
     42  EVAL_REPORT,
     43  EVAL_SUM
     44};
     45
     46struct sh_qeval  /* Queue with definitions */
     47{
     48  sh_string       * label;
     49  enum policies     policy;
     50  int               severity;
     51  time_t            interval;        /* if EVAL_SUM, interval   */
     52  struct sh_qeval * next;
     53};
     54
     55struct sh_qeval * sh_log_find_queue(const char * str);
     56
     57int sh_log_lookup_severity(const char * str);
    4458
    4559#endif

  • trunk/include/sh_string.h

    r260 r265  
    22#define SH_STRING_H
    33
     4#include <stdio.h>
    45
    56/* String definition and utility functions.
    … …  
    8485char ** split_array_list(char *line, unsigned int * nfields, size_t * lengths);
    8586
     87/* Same as above, but split on delimiter list (token)
     88 */
     89char ** split_array_token (char *line,
     90                           unsigned int * nfields, size_t * lengths,
     91                           const char * token);
     92
    8693/* Return a split_array_list() of a list contained in 'PREFIX\s*( list ).*'
    8794 */

  • trunk/include/sh_unix.h

    r264 r265  
    219219void sh_unix_closeall (int fd, int except, int inchild);
    220220
     221/* Check whether directory for pid file exists
     222 */
     223int sh_unix_check_piddir (char * pidpath);
    221224
    222225/* write lock for filename
Note: See TracChangeset for help on using the changeset viewer.