correlation.c File Reference

#include "spp_ai.h"
#include <unistd.h>
#include <sys/stat.h>
#include <pthread.h>
#include <libxml/xmlreader.h>

Data Structures
struct	hyperalert_key
struct	hyperalert
Enumerations
enum	{   inHyperAlert, inSnortIdTag, inPreTag, inPostTag,   TAG_NUM }
Functions
PRIVATE hyperalert *	_AI_hyperalert_from_XML (hyperalert_key key)
	Parse info about a hyperalert from a correlation XML file, if it exists.
void *	AI_alert_correlation_thread (void *arg)
	Thread for correlating clustered alerts.
Variables
PRIVATE hyperalert *	hyperalerts = NULL
PRIVATE AI_config *	conf = NULL