bro_docs: NetVar.cc File Reference

00216 { 00217 table_expire_interval = opt_internal_double("table_expire_interval"); 00218 table_expire_delay = opt_internal_double("table_expire_delay"); 00219 table_expire_size = opt_internal_int("table_expire_size"); 00220 00221 state_dir = internal_val("state_dir")->AsStringVal(); 00222 state_write_delay = opt_internal_double("state_write_delay"); 00223 00224 log_rotate_interval = opt_internal_double("log_rotate_interval"); 00225 log_max_size = opt_internal_double("log_max_size"); 00226 rotate_info = internal_type("rotate_info")->AsRecordType(); 00227 log_encryption_key = opt_internal_string("log_encryption_key"); 00228 00229 peer_description = 00230 internal_val("peer_description")->AsStringVal(); 00231 peer = internal_type("event_peer")->AsRecordType(); 00232 forward_remote_state_changes = 00233 opt_internal_int("forward_remote_state_changes"); 00234 forward_remote_events = opt_internal_int("forward_remote_events"); 00235 00236 ssl_ca_certificate = internal_val("ssl_ca_certificate")->AsStringVal(); 00237 ssl_private_key = internal_val("ssl_private_key")->AsStringVal(); 00238 ssl_passphrase = internal_val("ssl_passphrase")->AsStringVal(); 00239 00240 packet_filter_default = opt_internal_int("packet_filter_default"); 00241 00242 sig_max_group_size = opt_internal_int("sig_max_group_size"); 00243 enable_syslog = opt_internal_int("enable_syslog"); 00244 }

00247         {
00248 #include "const.bif.netvar_init"
00249 #include "event.bif.netvar_init"
00250 
00251         conn_id = internal_type("conn_id")->AsRecordType();
00252         endpoint = internal_type("endpoint")->AsRecordType();
00253         endpoint_stats = internal_type("endpoint_stats")->AsRecordType();
00254         connection_type = internal_type("connection")->AsRecordType();
00255         icmp_conn = internal_type("icmp_conn")->AsRecordType();
00256         icmp_context = internal_type("icmp_context")->AsRecordType();
00257         signature_state = internal_type("signature_state")->AsRecordType();
00258         SYN_packet = internal_type("SYN_packet")->AsRecordType();
00259         transport_proto = internal_type("transport_proto")->AsEnumType();
00260 
00261         ignore_checksums = opt_internal_int("ignore_checksums");
00262         partial_connection_ok = opt_internal_int("partial_connection_ok");
00263         tcp_SYN_ack_ok = opt_internal_int("tcp_SYN_ack_ok");
00264         tcp_match_undelivered = opt_internal_int("tcp_match_undelivered");
00265 
00266         encap_hdr_size = opt_internal_int("encap_hdr_size");
00267 
00268         tunnel_port = opt_internal_int("tunnel_port");
00269         // If it's a UDP port, normalize it.
00270         tunnel_port &= ~UDP_PORT_MASK;
00271 
00272         frag_timeout = opt_internal_double("frag_timeout");
00273 
00274         tcp_SYN_timeout = opt_internal_double("tcp_SYN_timeout");
00275         tcp_session_timer = opt_internal_double("tcp_session_timer");
00276         tcp_connection_linger = opt_internal_double("tcp_connection_linger");
00277         tcp_attempt_delay = opt_internal_double("tcp_attempt_delay");
00278         tcp_close_delay = opt_internal_double("tcp_close_delay");
00279         tcp_reset_delay = opt_internal_double("tcp_reset_delay");
00280         tcp_partial_close_delay = opt_internal_double("tcp_partial_close_delay");
00281 
00282         ssl_compare_cipherspecs  = opt_internal_int("ssl_compare_cipherspecs");
00283         ssl_analyze_certificates = opt_internal_int("ssl_analyze_certificates");
00284         ssl_store_certificates   = opt_internal_int("ssl_store_certificates");
00285         ssl_verify_certificates  = opt_internal_int("ssl_verify_certificates");
00286         ssl_store_key_material = opt_internal_int("ssl_store_key_material");
00287         ssl_max_cipherspec_size  = opt_internal_int("ssl_max_cipherspec_size");
00288 
00289         x509_trusted_cert_path = opt_internal_string("X509_trusted_cert_path");
00290         ssl_store_cert_path = opt_internal_string("ssl_store_cert_path");
00291         x509_type = internal_type("X509")->AsRecordType();
00292         cipher_suites_list = internal_type("cipher_suites_list")->AsTableType();
00293         x509_crl_file = opt_internal_string("X509_crl_file");
00294         x509_extension = internal_type("X509_extension")->AsTableType();
00295         SSL_sessionID = internal_type("SSL_sessionID")->AsTableType();
00296 
00297         non_analyzed_lifetime = opt_internal_double("non_analyzed_lifetime");
00298         tcp_inactivity_timeout = opt_internal_double("tcp_inactivity_timeout");
00299         udp_inactivity_timeout = opt_internal_double("udp_inactivity_timeout");
00300         icmp_inactivity_timeout = opt_internal_double("icmp_inactivity_timeout");
00301 
00302         tcp_storm_thresh = opt_internal_int("tcp_storm_thresh");
00303         tcp_storm_interarrival_thresh =
00304                 opt_internal_double("tcp_storm_interarrival_thresh");
00305 
00306         tcp_reassembler_ports_orig =
00307                 internal_val("tcp_reassembler_ports_orig")->AsTableVal();
00308         tcp_reassembler_ports_resp =
00309                 internal_val("tcp_reassembler_ports_resp")->AsTableVal();
00310 
00311         tcp_content_delivery_ports_orig =
00312                 internal_val("tcp_content_delivery_ports_orig")->AsTableVal();
00313         tcp_content_delivery_ports_resp =
00314                 internal_val("tcp_content_delivery_ports_resp")->AsTableVal();
00315 
00316         dns_session_timeout = opt_internal_double("dns_session_timeout");
00317         ntp_session_timeout = opt_internal_double("ntp_session_timeout");
00318         rpc_timeout = opt_internal_double("rpc_timeout");
00319 
00320         net_stats = internal_type("net_stats")->AsRecordType();
00321 
00322         watchdog_interval = int(opt_internal_double("watchdog_interval"));
00323         heartbeat_interval = opt_internal_double("heartbeat_interval");
00324 
00325         max_timer_expires = opt_internal_int("max_timer_expires");
00326 
00327         skip_authentication = internal_list_val("skip_authentication");
00328         direct_login_prompts = internal_list_val("direct_login_prompts");
00329         login_prompts = internal_list_val("login_prompts");
00330         login_non_failure_msgs = internal_list_val("login_non_failure_msgs");
00331         login_failure_msgs = internal_list_val("login_failure_msgs");
00332         login_success_msgs = internal_list_val("login_success_msgs");
00333         login_timeouts = internal_list_val("login_timeouts");
00334 
00335         mime_segment_length = opt_internal_int("mime_segment_length");
00336         mime_segment_overlap_length = opt_internal_int("mime_segment_overlap_length");
00337         mime_header_rec = internal_type("mime_header_rec")->AsRecordType();
00338         mime_header_list = internal_type("mime_header_list")->AsTableType();
00339 
00340         http_entity_data_delivery_size = opt_internal_int("http_entity_data_delivery_size");
00341         http_stats_rec = internal_type("http_stats_rec")->AsRecordType();
00342         http_message_stat = internal_type("http_message_stat")->AsRecordType();
00343         truncate_http_URI = opt_internal_int("truncate_http_URI");
00344 
00345         pm_request = pm_request_null || pm_request_set ||
00346                 pm_request_unset || pm_request_getport ||
00347                 pm_request_dump || pm_request_callit ||
00348                 pm_attempt_null || pm_attempt_set ||
00349                 pm_attempt_unset || pm_attempt_getport ||
00350                 pm_attempt_dump || pm_attempt_callit ||
00351                 pm_bad_port;
00352 
00353         pm_mapping = internal_type("pm_mapping")->AsRecordType();
00354         pm_mappings = internal_type("pm_mappings")->AsTableType();
00355         pm_port_request = internal_type("pm_port_request")->AsRecordType();
00356         pm_callit_request = internal_type("pm_callit_request")->AsRecordType();
00357 
00358         nfs3_attrs = internal_type("nfs3_attrs")->AsRecordType();
00359         nfs3_lookup_args = internal_type("nfs3_lookup_args")->AsRecordType();
00360         nfs3_lookup_reply = internal_type("nfs3_lookup_reply")->AsRecordType();
00361         nfs3_fsstat = internal_type("nfs3_fsstat")->AsRecordType();
00362 
00363         ntp_msg = internal_type("ntp_msg")->AsRecordType();
00364 
00365         samba_cmds = internal_val("samba_cmds")->AsTableVal();
00366 
00367         dns_msg = internal_type("dns_msg")->AsRecordType();
00368         dns_answer = internal_type("dns_answer")->AsRecordType();
00369         dns_soa = internal_type("dns_soa")->AsRecordType();
00370         dns_edns_additional =
00371                 internal_type("dns_edns_additional")->AsRecordType();
00372         dns_tsig_additional =
00373                 internal_type("dns_tsig_additional")->AsRecordType();
00374 
00375         dns_skip_auth = internal_val("dns_skip_auth")->AsTableVal();
00376         dns_skip_addl = internal_val("dns_skip_addl")->AsTableVal();
00377         dns_max_queries = opt_internal_int("dns_max_queries");
00378 
00379         stp_delta = opt_internal_double("stp_delta");
00380         stp_idle_min = opt_internal_double("stp_idle_min");
00381 
00382         interconn_min_interarrival = opt_internal_double("interconn_min_interarrival");
00383         interconn_max_interarrival = opt_internal_double("interconn_max_interarrival");
00384         interconn_max_keystroke_pkt_size = opt_internal_int("interconn_max_keystroke_pkt_size");
00385         interconn_default_pkt_size = opt_internal_int("interconn_default_pkt_size");
00386         interconn_stat_period = opt_internal_double("interconn_stat_period");
00387         interconn_stat_backoff = opt_internal_double("interconn_stat_backoff");
00388         interconn_endp_stats = internal_type("interconn_endp_stats")->AsRecordType();
00389 
00390         backdoor_stat_period = opt_internal_double("backdoor_stat_period");
00391         backdoor_stat_backoff = opt_internal_double("backdoor_stat_backoff");
00392         backdoor_endp_stats = internal_type("backdoor_endp_stats")->AsRecordType();
00393 
00394         software = internal_type("software")->AsRecordType();
00395         software_version = internal_type("software_version")->AsRecordType();
00396         OS_version = internal_type("OS_version")->AsRecordType();
00397         OS_version_inference = internal_type("OS_version_inference")->AsEnumType();
00398         generate_OS_version_event =
00399                 opt_internal_table("generate_OS_version_event");
00400 
00401         packet_type = internal_type("packet")->AsRecordType();
00402 
00403         packet_sort_window = opt_internal_double("packet_sort_window");
00404 
00405         orig_addr_anonymization = opt_internal_int("orig_addr_anonymization");
00406         resp_addr_anonymization = opt_internal_int("resp_addr_anonymization");
00407         other_addr_anonymization = opt_internal_int("other_addr_anonymization");
00408 
00409         preserve_orig_addr = opt_internal_table("preserve_orig_addr");
00410         preserve_resp_addr = opt_internal_table("preserve_resp_addr");
00411         preserve_other_addr = opt_internal_table("preserve_other_addr");
00412 
00413         connection_status_update_interval =
00414                 opt_internal_double("connection_status_update_interval");
00415 
00416         profiling_file = internal_val("profiling_file");
00417         expensive_profiling_multiple =
00418                 opt_internal_int("expensive_profiling_multiple");
00419         profiling_interval = opt_internal_double("profiling_interval");
00420         segment_profiling = opt_internal_int("segment_profiling");
00421 
00422         pkt_profile_mode = opt_internal_int("pkt_profile_mode");
00423         pkt_profile_freq = opt_internal_double("pkt_profile_freq");
00424         pkt_profile_file = opt_internal_val("pkt_profile_file");
00425 
00426         use_connection_compressor =
00427                 opt_internal_int("use_connection_compressor");
00428         cc_handle_resets = opt_internal_int("cc_handle_resets");
00429         cc_handle_only_syns = opt_internal_int("cc_handle_only_syns");
00430         cc_instantiate_on_data = opt_internal_int("cc_instantiate_on_data");
00431         }

Variable Documentation

NetVar.cc File Reference

Functions

Variables

Function Documentation

Variable Documentation


Functions
void	init_general_global_var ()
void	init_net_var ()
Variables
RecordType *	conn_id
RecordType *	endpoint
RecordType *	endpoint_stats
RecordType *	connection_type
RecordType *	icmp_conn
RecordType *	icmp_context
RecordType *	SYN_packet
RecordType *	signature_state
EnumType *	transport_proto
RecordType *	net_stats
int	watchdog_interval
double	heartbeat_interval
int	max_timer_expires
int	ignore_checksums
int	partial_connection_ok
int	tcp_SYN_ack_ok
int	tcp_match_undelivered
int	encap_hdr_size
int	tunnel_port
double	frag_timeout
double	tcp_SYN_timeout
double	tcp_session_timer
double	tcp_connection_linger
double	tcp_attempt_delay
double	tcp_close_delay
double	tcp_reset_delay
double	tcp_partial_close_delay
int	ssl_compare_cipherspecs
int	ssl_analyze_certificates
int	ssl_store_certificates
int	ssl_verify_certificates
int	ssl_store_key_material
int	ssl_max_cipherspec_size
StringVal *	ssl_store_cert_path
StringVal *	x509_trusted_cert_path
TableType *	cipher_suites_list
RecordType *	x509_type
double	non_analyzed_lifetime
double	tcp_inactivity_timeout
double	udp_inactivity_timeout
double	icmp_inactivity_timeout
int	tcp_storm_thresh
double	tcp_storm_interarrival_thresh
TableVal *	tcp_reassembler_ports_orig
TableVal *	tcp_reassembler_ports_resp
TableVal *	tcp_content_delivery_ports_orig
TableVal *	tcp_content_delivery_ports_resp
double	dns_session_timeout
double	ntp_session_timeout
double	rpc_timeout
ListVal *	skip_authentication
ListVal *	direct_login_prompts
ListVal *	login_prompts
ListVal *	login_non_failure_msgs
ListVal *	login_failure_msgs
ListVal *	login_success_msgs
ListVal *	login_timeouts
int	mime_segment_length
int	mime_segment_overlap_length
RecordType *	mime_header_rec
TableType *	mime_header_list
int	http_entity_data_delivery_size
RecordType *	http_stats_rec
RecordType *	http_message_stat
int	truncate_http_URI
int	pm_request
RecordType *	pm_mapping
TableType *	pm_mappings
RecordType *	pm_port_request
RecordType *	pm_callit_request
RecordType *	nfs3_attrs
RecordType *	nfs3_lookup_args
RecordType *	nfs3_lookup_reply
RecordType *	nfs3_fsstat
RecordType *	ntp_msg
TableVal *	samba_cmds
RecordType *	dns_msg
RecordType *	dns_answer
RecordType *	dns_soa
RecordType *	dns_edns_additional
RecordType *	dns_tsig_additional
TableVal *	dns_skip_auth
TableVal *	dns_skip_addl
int	dns_max_queries
double	stp_delta
double	stp_idle_min
double	interconn_min_interarrival
double	interconn_max_interarrival
int	interconn_max_keystroke_pkt_size
int	interconn_default_pkt_size
double	interconn_stat_period
double	interconn_stat_backoff
RecordType *	interconn_endp_stats
double	backdoor_stat_period
double	backdoor_stat_backoff
RecordType *	backdoor_endp_stats
RecordType *	software
RecordType *	software_version
RecordType *	OS_version
EnumType *	OS_version_inference
TableVal *	generate_OS_version_event
double	table_expire_interval
double	table_expire_delay
int	table_expire_size
RecordType *	packet_type
double	packet_sort_window
double	connection_status_update_interval
StringVal *	state_dir
double	state_write_delay
int	orig_addr_anonymization
int	resp_addr_anonymization
int	other_addr_anonymization
TableVal *	preserve_orig_addr
TableVal *	preserve_resp_addr
TableVal *	preserve_other_addr
double	log_rotate_interval
double	log_max_size
RecordType *	rotate_info
StringVal *	log_encryption_key
StringVal *	peer_description
RecordType *	peer
int	forward_remote_state_changes
int	forward_remote_events
StringVal *	ssl_ca_certificate
StringVal *	ssl_private_key
StringVal *	ssl_passphrase
StringVal *	x509_crl_file
TableType *	x509_extension
TableType *	SSL_sessionID
Val *	profiling_file
double	profiling_interval
int	expensive_profiling_multiple
int	segment_profiling
int	pkt_profile_mode
double	pkt_profile_freq
Val *	pkt_profile_file
int	packet_filter_default
int	sig_max_group_size
int	enable_syslog
int	use_connection_compressor
int	cc_handle_resets
int	cc_handle_only_syns
int	cc_instantiate_on_data