Prelude logging module
[Logging modules]

Collaboration diagram for Prelude logging module:


Defines
#define	NUFW_ANALYZER_MANUFACTURER "http://www.nufw.org/"
#define	NUFW_ANALYZER_CLASS "Firewall"
#define	NUFW_ANALYZER_VERSION VERSION
#define	NUFW_ANALYZER_MODEL "NuFW"
#define	CLIENT_ANALYZER_NAME "libnuclient"
#define	CLIENT_ANALYZER_MANUFACTURER NUFW_ANALYZER_MANUFACTURER
#define	CLIENT_ANALYZER_CLASS "NuFW client"
#define	CLIENT_ANALYZER_MODEL "NuFW"
Functions
G_MODULE_EXPORT uint32_t	get_api_version ()
G_MODULE_EXPORT gchar *	unload_module_with_params (gpointer params_ptr)
void	update_prelude_timer ()
G_MODULE_EXPORT void	g_module_unload (GModule *module)
void	destroy_idmef (idmef_message_t *idmef)
G_MODULE_EXPORT gboolean	init_module_from_conf (module_t *module)
static void	del_idmef_object (idmef_message_t message, const char object)
static int	add_idmef_object (idmef_message_t message, const char object, const char *value)
static int	feed_template (idmef_message_t *idmef)
static idmef_message_t *	create_alert_template ()
static idmef_message_t *	create_packet_template ()
static void	feed_source_libnuclient (idmef_message_t *idmef)
static void	feed_target_nuauth (idmef_message_t *idmef)
static idmef_message_t *	create_autherr_template ()
static idmef_message_t *	create_session_template ()
idmef_message_t *	create_from_template (idmef_message_t tpl, connection_t conn)
static void	set_os_infos (idmef_message_t idmef, const char osname, const char osrelease, const char osversion)
static void	set_nufw_infos (idmef_message_t idmef, const char nufw_address, const char *nufw_port)
void	set_source0_address (idmef_message_t idmef, struct in6_addr addr)
static idmef_message_t *	create_message_packet (idmef_message_t tpl, tcp_state_t state, connection_t conn, char state_text, char impact, char *severity)
static void	add_user_information (idmef_message_t idmef, user_session_t session, int userid_is_valid)
static idmef_message_t *	create_message_session (idmef_message_t tpl, user_session_t session, char state_text, char impact, char *severity)
static idmef_message_t *	create_message_autherr (idmef_message_t tpl, user_session_t session, const char text, const char severity)
G_MODULE_EXPORT gint	user_packet_logs (void *pelement, tcp_state_t state, gpointer params_ptr)
G_MODULE_EXPORT int	user_session_logs (user_session_t *c_session, session_state_t state, gpointer params_ptr)
G_MODULE_EXPORT gchar *	g_module_check_init ()
G_MODULE_EXPORT void	auth_error_log (user_session_t session, nuauth_auth_error_t error, const char text, gpointer params_ptr)
Variables
GMutex *	global_client_mutex
prelude_client_t *	global_client

Define Documentation

#define CLIENT_ANALYZER_CLASS "NuFW client"

Definition at line 43 of file nuprelude.c.

#define CLIENT_ANALYZER_MANUFACTURER NUFW_ANALYZER_MANUFACTURER

Definition at line 42 of file nuprelude.c.

#define CLIENT_ANALYZER_MODEL "NuFW"

Definition at line 44 of file nuprelude.c.

#define CLIENT_ANALYZER_NAME "libnuclient"

Definition at line 41 of file nuprelude.c.

#define NUFW_ANALYZER_CLASS "Firewall"

Definition at line 37 of file nuprelude.c.

Referenced by feed_template().

#define NUFW_ANALYZER_MANUFACTURER "http://www.nufw.org/"

Definition at line 36 of file nuprelude.c.

Referenced by feed_template().

#define NUFW_ANALYZER_MODEL "NuFW"

Definition at line 39 of file nuprelude.c.

Referenced by feed_template().

#define NUFW_ANALYZER_VERSION VERSION

Definition at line 38 of file nuprelude.c.

Referenced by feed_template().

Function Documentation

static int add_idmef_object	(	idmef_message_t *	message,
		const char *	object,
		const char *	value
	)			`[static]`

Add an IDMEF object

Definition at line 134 of file nuprelude.c.

References DEBUG, DEBUG_AREA_MAIN, and log_message.

Referenced by add_user_information(), create_message_autherr(), create_message_packet(), create_message_session(), feed_source_libnuclient(), feed_target_nuauth(), feed_template(), set_nufw_infos(), set_os_infos(), and set_source0_address().

static void add_user_information	(	idmef_message_t *	idmef,
		user_session_t *	session,
		int	userid_is_valid
	)			`[static]`

Add NuFW client informations to an IDMEF message: user name and identifier

Definition at line 544 of file nuprelude.c.

References add_idmef_object(), del_idmef_object(), secure_snprintf(), and session.

Referenced by create_message_autherr(), and create_message_session().

Here is the call graph for this function:

G_MODULE_EXPORT void auth_error_log	(	user_session_t *	session,
		nuauth_auth_error_t	error,
		const char *	text,
		gpointer	params_ptr
	)

Definition at line 826 of file nuprelude.c.

References AUTH_ERROR_CREDENTIALS, log_prelude_params::autherr_tpl, create_autherr_template(), create_message_autherr(), global_client, global_client_mutex, and session.

Here is the call graph for this function:

static idmef_message_t* create_alert_template ( ) [static]

Create Prelude alert message template.

Returns:: NULL on error, or new allocated idmef message on succes.

Definition at line 229 of file nuprelude.c.

References feed_template().

Referenced by create_autherr_template(), create_packet_template(), and create_session_template().

Here is the call graph for this function:

static idmef_message_t* create_autherr_template ( ) [static]

Create Prelude authentication error message template

Returns:: NULL on error, or new allocated idmef message on succes.

Definition at line 299 of file nuprelude.c.

References create_alert_template(), feed_source_libnuclient(), and feed_target_nuauth().

Referenced by auth_error_log().

Here is the call graph for this function:

idmef_message_t* create_from_template	(	idmef_message_t *	tpl,
		connection_t *	conn
	)

Create an IDMEF message from a template and set common parameters

Definition at line 331 of file nuprelude.c.

References connection_t::timestamp.

Referenced by create_message_autherr(), create_message_packet(), and create_message_session().

static idmef_message_t* create_message_autherr	(	idmef_message_t *	tpl,
		user_session_t *	session,
		const char *	text,
		const char *	severity
	)			`[static]`

Definition at line 611 of file nuprelude.c.

References add_idmef_object(), add_user_information(), create_from_template(), format_ipv6(), secure_snprintf(), session, and set_source0_address().

Referenced by auth_error_log().

Here is the call graph for this function:

static idmef_message_t* create_message_packet	(	idmef_message_t *	tpl,
		tcp_state_t	state,
		connection_t *	conn,
		char *	state_text,
		char *	impact,
		char *	severity
	)			`[static]`

Create IDMEF message for NuFW packet message

Definition at line 418 of file nuprelude.c.

References add_idmef_object(), connection_t::app_name, nuauth_params::authreq_port, create_from_template(), tracking_t::daddr, del_idmef_object(), tracking_t::dest, format_ipv6(), nuauthconf, connection_t::os_release, connection_t::os_sysname, connection_t::os_version, nufw_session_t::peername, tracking_t::protocol, tracking_t::saddr, secure_snprintf(), set_nufw_infos(), set_os_infos(), set_source0_address(), tracking_t::source, TCP_STATE_DROP, TCP_STATE_ESTABLISHED, connection_t::tls, connection_t::tracking, connection_t::user_id, and connection_t::username.

Referenced by user_packet_logs().

Here is the call graph for this function:

static idmef_message_t* create_message_session	(	idmef_message_t *	tpl,
		user_session_t *	session,
		char *	state_text,
		char *	impact,
		char *	severity
	)			`[static]`