2010-08-16 22:09:34 +02:00
\hypertarget { alert_ _ parser_ 8c} {
\section { alert\_ \- parser.c File Reference}
\label { alert_ _ parser_ 8c} \index { alert\_ \- parser.c@{ alert\_ \- parser.c} }
}
{ \ttfamily \# include \char `\" { } spp\_ \- ai.h\char `\" { } } \par
{ \ttfamily \# include $ < $ stdio.h$ > $ } \par
{ \ttfamily \# include $ < $ unistd.h$ > $ } \par
{ \ttfamily \# include $ < $ time.h$ > $ } \par
{ \ttfamily \# include $ < $ sys/inotify.h$ > $ } \par
{ \ttfamily \# include $ < $ sys/stat.h$ > $ } \par
2010-09-04 21:33:53 +02:00
{ \ttfamily \# include $ < $ pthread.h$ > $ } \par
2010-08-16 22:09:34 +02:00
\subsection * { Functions}
\begin { DoxyCompactItemize}
\item
2010-09-04 21:33:53 +02:00
void $ \ast $ \hyperlink { group_ _ alert_ _ parser_ ga5aab8d9bdf0e92a51731442fd787f61f} { AI\_ \- file\_ \- alertparser\_ \- thread} (void $ \ast $ arg)
2010-08-16 22:09:34 +02:00
\begin { DoxyCompactList} \small \item \em Thread for parsing Snort's alert file. \item \end { DoxyCompactList} \item
2010-09-04 21:33:53 +02:00
PRIVATE \hyperlink { struct_ _ AI_ _ snort_ _ alert} { AI\_ \- snort\_ \- alert} $ \ast $ \hyperlink { group_ _ alert_ _ parser_ ga6c5014cae9155379fdc4db649b2c862d} { \_ \- AI\_ \- copy\_ \- alerts} (\hyperlink { struct_ _ AI_ _ snort_ _ alert} { AI\_ \- snort\_ \- alert} $ \ast $ node)
2010-08-16 22:09:34 +02:00
\begin { DoxyCompactList} \small \item \em Create a copy of the alert log struct (this is done for leaving the alert log structure in this file as read-\/ only). \item \end { DoxyCompactList} \item
2010-09-04 21:33:53 +02:00
\hyperlink { struct_ _ AI_ _ snort_ _ alert} { AI\_ \- snort\_ \- alert} $ \ast $ \hyperlink { group_ _ alert_ _ parser_ ga99474495643197b3075ac22ec6f6c70f} { AI\_ \- get\_ \- alerts} ()
2010-08-16 22:09:34 +02:00
\begin { DoxyCompactList} \small \item \em Return the alerts parsed so far as a linked list. \item \end { DoxyCompactList} \item
2010-09-04 21:33:53 +02:00
void \hyperlink { group_ _ alert_ _ parser_ ga270e86669a0aa64a8da37bc16cda645b} { AI\_ \- free\_ \- alerts} (\hyperlink { struct_ _ AI_ _ snort_ _ alert} { AI\_ \- snort\_ \- alert} $ \ast $ node)
2010-08-16 22:09:34 +02:00
\begin { DoxyCompactList} \small \item \em Deallocate the memory of a log alert linked list. \item \end { DoxyCompactList} \end { DoxyCompactItemize}
\subsection * { Variables}
\begin { DoxyCompactItemize}
\item
PRIVATE \hyperlink { struct_ _ AI_ _ snort_ _ alert} { AI\_ \- snort\_ \- alert} $ \ast $ \hyperlink { alert_ _ parser_ 8c_ ae837fc04e61c0eb052f997c54b4fd9fe} { alerts} = NULL
\item
PRIVATE FILE $ \ast $ \hyperlink { alert_ _ parser_ 8c_ abee2a33368912d9288c76b51160a9ed6} { alert\_ \- fp} = NULL
2010-09-11 12:45:30 +02:00
\item
PRIVATE \hyperlink { spp_ _ ai_ 8h_ a3e5b8192e7d9ffaf3542f1210aec18dd} { BOOL} \hyperlink { alert_ _ parser_ 8c_ afebc81c042a632dc987e113b7f390274} { lock\_ \- flag} = false
2010-08-16 22:09:34 +02:00
\end { DoxyCompactItemize}
\subsection { Variable Documentation}
\hypertarget { alert_ _ parser_ 8c_ abee2a33368912d9288c76b51160a9ed6} {
\index { alert\_ \- parser.c@{ alert\_ \- parser.c} !alert\_ \- fp@{ alert\_ \- fp} }
\index { alert\_ \- fp@{ alert\_ \- fp} !alert_ parser.c@{ alert\_ \- parser.c} }
\subsubsection [{alert\_\-fp}] { \setlength { \rightskip } { 0pt plus 5cm} PRIVATE FILE$ \ast $ { \bf alert\_ \- fp} = NULL} }
\label { alert_ _ parser_ 8c_ abee2a33368912d9288c76b51160a9ed6}
\hypertarget { alert_ _ parser_ 8c_ ae837fc04e61c0eb052f997c54b4fd9fe} {
\index { alert\_ \- parser.c@{ alert\_ \- parser.c} !alerts@{ alerts} }
\index { alerts@{ alerts} !alert_ parser.c@{ alert\_ \- parser.c} }
\subsubsection [{alerts}] { \setlength { \rightskip } { 0pt plus 5cm} PRIVATE { \bf AI\_ \- snort\_ \- alert} $ \ast $ { \bf alerts} = NULL} }
\label { alert_ _ parser_ 8c_ ae837fc04e61c0eb052f997c54b4fd9fe}
2010-09-11 12:45:30 +02:00
\hypertarget { alert_ _ parser_ 8c_ afebc81c042a632dc987e113b7f390274} {
\index { alert\_ \- parser.c@{ alert\_ \- parser.c} !lock\_ \- flag@{ lock\_ \- flag} }
\index { lock\_ \- flag@{ lock\_ \- flag} !alert_ parser.c@{ alert\_ \- parser.c} }
\subsubsection [{lock\_\-flag}] { \setlength { \rightskip } { 0pt plus 5cm} PRIVATE { \bf BOOL} { \bf lock\_ \- flag} = false} }
\label { alert_ _ parser_ 8c_ afebc81c042a632dc987e113b7f390274}