mirror of
https://github.com/BlackLight/Snort_AIPreproc.git
synced 2024-11-14 12:47:16 +01:00
77 lines
2.1 KiB
C
77 lines
2.1 KiB
C
|
/* $Id$ */
|
||
|
|
/*
|
||
|
|
** Copyright (C) 2002-2010 Sourcefire, Inc.
|
||
|
|
** Copyright (C) 1998-2002 Martin Roesch <roesch@sourcefire.com>
|
||
|
|
**
|
||
|
|
** This program is free software; you can redistribute it and/or modify
|
||
|
|
** it under the terms of the GNU General Public License Version 2 as
|
||
|
|
** published by the Free Software Foundation. You may not use, modify or
|
||
|
|
** distribute this program under any other version of the GNU General
|
||
|
|
** Public License.
|
||
|
|
**
|
||
|
|
** This program is distributed in the hope that it will be useful,
|
||
|
|
** but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
|
|
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
|
|
** GNU General Public License for more details.
|
||
|
|
**
|
||
|
|
** You should have received a copy of the GNU General Public License
|
||
|
|
** along with this program; if not, write to the Free Software
|
||
|
|
** Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
||
|
|
*/
|
||
|
|
|
||
|
|
/* D E F I N E S ************************************************************/
|
||
|
|
#ifndef __EVENT_H__
|
||
|
|
#define __EVENT_H__
|
||
|
|
|
||
|
|
#ifdef HAVE_CONFIG_H
|
||
|
|
#include "config.h"
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#ifdef OSF1
|
||
|
|
#include <sys/bitypes.h>
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#include <sys/types.h>
|
||
|
|
#ifndef WIN32
|
||
|
|
#include <sys/time.h>
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#include "pcap_pkthdr32.h"
|
||
|
|
|
||
|
|
typedef struct _Event
|
||
|
|
{
|
||
|
|
uint32_t sig_generator; /* which part of snort generated the alert? */
|
||
|
|
uint32_t sig_id; /* sig id for this generator */
|
||
|
|
uint32_t sig_rev; /* sig revision for this id */
|
||
|
|
uint32_t classification; /* event classification */
|
||
|
|
uint32_t priority; /* event priority */
|
||
|
|
uint32_t event_id; /* event ID */
|
||
|
|
uint32_t event_reference; /* reference to other events that have gone off,
|
||
|
|
* such as in the case of tagged packets...
|
||
|
|
*/
|
||
|
|
struct sf_timeval32 ref_time; /* reference time for the event reference */
|
||
|
|
|
||
|
|
/* Don't add to this structure because this is the serialized data
|
||
|
|
* struct for unified logging.
|
||
|
|
*/
|
||
|
|
} Event;
|
||
|
|
|
||
|
|
#if 0
|
||
|
|
typedef struct _EventID
|
||
|
|
{
|
||
|
|
uint32_t sequence;
|
||
|
|
uint32_t seconds;
|
||
|
|
} EventID;
|
||
|
|
|
||
|
|
typedef struct _Event
|
||
|
|
{
|
||
|
|
EventID id;
|
||
|
|
uint32_t uSeconds;
|
||
|
|
SigInfo sigInfo;
|
||
|
|
} Event;
|
||
|
|
|
||
|
|
#endif
|
||
|
|
|
||
|
|
|
||
|
|
#endif /* __EVENT_H__ */
|