<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/> <title>Snort AI preprocessor module: Manage alerts on a MySQL database</title> <link href="tabs.css" rel="stylesheet" type="text/css"/> <link href="search/search.css" rel="stylesheet" type="text/css"/> <script type="text/javaScript" src="search/search.js"></script> <link href="doxygen.css" rel="stylesheet" type="text/css"/> </head> <body onload='searchBox.OnSelectItem(0);'> <!-- Generated by Doxygen 1.7.1 --> <script type="text/javascript"><!-- var searchBox = new SearchBox("searchBox", "search",false,'Search'); --></script> <div class="navigation" id="top"> <div class="tabs"> <ul class="tablist"> <li><a href="index.html"><span>Main Page</span></a></li> <li><a href="modules.html"><span>Modules</span></a></li> <li><a href="annotated.html"><span>Data Structures</span></a></li> <li><a href="files.html"><span>Files</span></a></li> <li id="searchli"> <div id="MSearchBox" class="MSearchBoxInactive"> <span class="left"> <img id="MSearchSelect" src="search/mag_sel.png" onmouseover="return searchBox.OnSearchSelectShow()" onmouseout="return searchBox.OnSearchSelectHide()" alt=""/> <input type="text" id="MSearchField" value="Search" accesskey="S" onfocus="searchBox.OnSearchFieldFocus(true)" onblur="searchBox.OnSearchFieldFocus(false)" onkeyup="searchBox.OnSearchFieldChange(event)"/> </span><span class="right"> <a id="MSearchClose" href="javascript:searchBox.CloseResultsWindow()"><img id="MSearchCloseImg" border="0" src="search/close.png" alt=""/></a> </span> </div> </li> </ul> </div> </div> <div class="header"> <div class="summary"> <a href="#func-members">Functions</a> | <a href="#var-members">Variables</a> </div> <div class="headertitle"> <h1>Manage alerts on a MySQL database</h1> </div> </div> <div class="contents"> <table class="memberdecls"> <tr><td colspan="2"><h2><a name="func-members"></a> Functions</h2></td></tr> <tr><td class="memItemLeft" align="right" valign="top">void * </td><td class="memItemRight" valign="bottom"><a class="el" href="group__mysql.html#gadf275635641f88725930de208fb5523f">AI_mysql_alertparser_thread</a> (void *arg)</td></tr> <tr><td class="mdescLeft"> </td><td class="mdescRight">Thread for parsing alerts from MySQL database. <a href="#gadf275635641f88725930de208fb5523f"></a><br/></td></tr> <tr><td class="memItemLeft" align="right" valign="top">PRIVATE <a class="el" href="struct__AI__snort__alert.html">AI_snort_alert</a> * </td><td class="memItemRight" valign="bottom"><a class="el" href="group__mysql.html#gab14c269b1187da75d35d4af3eb70a302">_AI_mysql_copy_alerts</a> (<a class="el" href="struct__AI__snort__alert.html">AI_snort_alert</a> *node)</td></tr> <tr><td class="mdescLeft"> </td><td class="mdescRight">Create a copy of the alert log struct (this is done for leaving the alert log structure in this file as read-only). <a href="#gab14c269b1187da75d35d4af3eb70a302"></a><br/></td></tr> <tr><td class="memItemLeft" align="right" valign="top"><a class="el" href="struct__AI__snort__alert.html">AI_snort_alert</a> * </td><td class="memItemRight" valign="bottom"><a class="el" href="group__mysql.html#ga0ead3c1e46063e215168e76d7999d65b">AI_mysql_get_alerts</a> ()</td></tr> <tr><td class="mdescLeft"> </td><td class="mdescRight">Return the alerts parsed so far as a linked list. <a href="#ga0ead3c1e46063e215168e76d7999d65b"></a><br/></td></tr> <tr><td colspan="2"><h2><a name="var-members"></a> Variables</h2></td></tr> <tr><td class="memItemLeft" align="right" valign="top">PRIVATE <a class="el" href="structAI__config.html">AI_config</a> * </td><td class="memItemRight" valign="bottom"><a class="el" href="group__mysql.html#ga6439d32dccbbc77c9b2aad04897bfa74">config</a></td></tr> <tr><td class="memItemLeft" align="right" valign="top">PRIVATE <a class="el" href="struct__AI__snort__alert.html">AI_snort_alert</a> * </td><td class="memItemRight" valign="bottom"><a class="el" href="group__mysql.html#gae837fc04e61c0eb052f997c54b4fd9fe">alerts</a> = NULL</td></tr> <tr><td class="memItemLeft" align="right" valign="top">PRIVATE pthread_mutex_t </td><td class="memItemRight" valign="bottom"><a class="el" href="group__mysql.html#ga40bb4c7d0679e36cc0ec4fa41d36d96c">db_mutex</a> = PTHREAD_MUTEX_INITIALIZER</td></tr> </table> <hr/><h2>Function Documentation</h2> <a class="anchor" id="gab14c269b1187da75d35d4af3eb70a302"></a><!-- doxytag: member="db.c::_AI_mysql_copy_alerts" ref="gab14c269b1187da75d35d4af3eb70a302" args="(AI_snort_alert *node)" --> <div class="memitem"> <div class="memproto"> <table class="memname"> <tr> <td class="memname">PRIVATE <a class="el" href="struct__AI__snort__alert.html">AI_snort_alert</a>* _AI_mysql_copy_alerts </td> <td>(</td> <td class="paramtype"><a class="el" href="struct__AI__snort__alert.html">AI_snort_alert</a> * </td> <td class="paramname"> <em>node</em></td> <td> ) </td> <td></td> </tr> </table> </div> <div class="memdoc"> <p>Create a copy of the alert log struct (this is done for leaving the alert log structure in this file as read-only). </p> <dl><dt><b>Parameters:</b></dt><dd> <table border="0" cellspacing="2" cellpadding="0"> <tr><td valign="top"></td><td valign="top"><em>node</em> </td><td>Starting node (used for the recursion) </td></tr> </table> </dd> </dl> <dl class="return"><dt><b>Returns:</b></dt><dd>A copy of the alert log linked list </dd></dl> </div> </div> <a class="anchor" id="gadf275635641f88725930de208fb5523f"></a><!-- doxytag: member="db.c::AI_mysql_alertparser_thread" ref="gadf275635641f88725930de208fb5523f" args="(void *arg)" --> <div class="memitem"> <div class="memproto"> <table class="memname"> <tr> <td class="memname">void* AI_mysql_alertparser_thread </td> <td>(</td> <td class="paramtype">void * </td> <td class="paramname"> <em>arg</em></td> <td> ) </td> <td></td> </tr> </table> </div> <div class="memdoc"> <p>Thread for parsing alerts from MySQL database. </p> <dl><dt><b>Parameters:</b></dt><dd> <table border="0" cellspacing="2" cellpadding="0"> <tr><td valign="top"></td><td valign="top"><em>arg</em> </td><td>void* pointer to the module configuration </td></tr> </table> </dd> </dl> </div> </div> <a class="anchor" id="ga0ead3c1e46063e215168e76d7999d65b"></a><!-- doxytag: member="db.c::AI_mysql_get_alerts" ref="ga0ead3c1e46063e215168e76d7999d65b" args="()" --> <div class="memitem"> <div class="memproto"> <table class="memname"> <tr> <td class="memname"><a class="el" href="struct__AI__snort__alert.html">AI_snort_alert</a>* AI_mysql_get_alerts </td> <td>(</td> <td class="paramtype">void </td> <td class="paramname"></td> <td> ) </td> <td></td> </tr> </table> </div> <div class="memdoc"> <p>Return the alerts parsed so far as a linked list. </p> <dl class="return"><dt><b>Returns:</b></dt><dd>An AI_snort_alert pointer identifying the list of alerts </dd></dl> </div> </div> <hr/><h2>Variable Documentation</h2> <a class="anchor" id="gae837fc04e61c0eb052f997c54b4fd9fe"></a><!-- doxytag: member="db.c::alerts" ref="gae837fc04e61c0eb052f997c54b4fd9fe" args="" --> <div class="memitem"> <div class="memproto"> <table class="memname"> <tr> <td class="memname">PRIVATE <a class="el" href="struct__AI__snort__alert.html">AI_snort_alert</a>* <a class="el" href="group__mysql.html#gae837fc04e61c0eb052f997c54b4fd9fe">alerts</a> = NULL</td> </tr> </table> </div> <div class="memdoc"> </div> </div> <a class="anchor" id="ga6439d32dccbbc77c9b2aad04897bfa74"></a><!-- doxytag: member="db.c::config" ref="ga6439d32dccbbc77c9b2aad04897bfa74" args="" --> <div class="memitem"> <div class="memproto"> <table class="memname"> <tr> <td class="memname">PRIVATE <a class="el" href="structAI__config.html">AI_config</a>* <a class="el" href="group__mysql.html#ga6439d32dccbbc77c9b2aad04897bfa74">config</a></td> </tr> </table> </div> <div class="memdoc"> </div> </div> <a class="anchor" id="ga40bb4c7d0679e36cc0ec4fa41d36d96c"></a><!-- doxytag: member="db.c::db_mutex" ref="ga40bb4c7d0679e36cc0ec4fa41d36d96c" args="" --> <div class="memitem"> <div class="memproto"> <table class="memname"> <tr> <td class="memname">PRIVATE pthread_mutex_t <a class="el" href="group__mysql.html#ga40bb4c7d0679e36cc0ec4fa41d36d96c">db_mutex</a> = PTHREAD_MUTEX_INITIALIZER</td> </tr> </table> </div> <div class="memdoc"> <p>pthread mutex for accessing database data </p> </div> </div> </div> <!--- window showing the filter options --> <div id="MSearchSelectWindow" onmouseover="return searchBox.OnSearchSelectShow()" onmouseout="return searchBox.OnSearchSelectHide()" onkeydown="return searchBox.OnSearchSelectKey(event)"> <a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(0)"><span class="SelectionMark"> </span>All</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(1)"><span class="SelectionMark"> </span>Data Structures</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(2)"><span class="SelectionMark"> </span>Files</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(3)"><span class="SelectionMark"> </span>Functions</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(4)"><span class="SelectionMark"> </span>Variables</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(5)"><span class="SelectionMark"> </span>Typedefs</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(6)"><span class="SelectionMark"> </span>Enumerations</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(7)"><span class="SelectionMark"> </span>Enumerator</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(8)"><span class="SelectionMark"> </span>Defines</a></div> <!-- iframe showing the search results (closed by default) --> <div id="MSearchResultsWindow"> <iframe src="" frameborder="0" name="MSearchResults" id="MSearchResults"> </iframe> </div> <hr class="footer"/><address class="footer"><small>Generated on Sat Sep 4 2010 21:30:42 for Snort AI preprocessor module by <a href="http://www.doxygen.org/index.html"> <img class="footer" src="doxygen.png" alt="doxygen"/></a> 1.7.1 </small></address> </body> </html>