alert_parser.c File Reference

#include "spp_ai.h"
#include <stdio.h>
#include <unistd.h>
#include <time.h>
#include <sys/inotify.h>
#include <sys/stat.h>

Functions
void *	AI_alertparser_thread (void *arg)
	Thread for parsing Snort's alert file.
PRIVATE AI_snort_alert *	_AI_copy_alerts (AI_snort_alert *node)
	Create a copy of the alert log struct (this is done for leaving the alert log structure in this file as read-only).
AI_snort_alert *	AI_get_alerts ()
	Return the alerts parsed so far as a linked list.
void	AI_free_alerts (AI_snort_alert *node)
	Deallocate the memory of a log alert linked list.
Variables
PRIVATE AI_snort_alert *	alerts = NULL
PRIVATE FILE *	alert_fp = NULL

---

Function Documentation

PRIVATE AI_snort_alert* _AI_copy_alerts

(

AI_snort_alert *

node

)

Create a copy of the alert log struct (this is done for leaving the alert log structure in this file as read-only).

FUNCTION: _AI_copy_alerts

Parameters:

node

Starting node (used for the recursion)

Returns:

A copy of the alert log linked list

void* AI_alertparser_thread

(

void *

arg

)

Thread for parsing Snort's alert file.

FUNCTION: AI_alertparser_thread

Parameters:

arg

void* pointer to module's configuration

void AI_free_alerts

(

AI_snort_alert *

node

)

Deallocate the memory of a log alert linked list.

FUNCTION: AI_free_alerts

Parameters:

node

Linked list to be freed

AI_snort_alert* AI_get_alerts

(

void

)

Return the alerts parsed so far as a linked list.

FUNCTION: AI_get_alerts

Returns:

An AI_snort_alert pointer identifying the list of alerts

---

Variable Documentation

PRIVATE FILE* alert_fp = NULL

PRIVATE AI_snort_alert* alerts = NULL