spo_alert_full.c File Reference

#include "event.h"
#include "decode.h"
#include "plugbase.h"
#include "spo_plugbase.h"
#include "debug.h"
#include "parser.h"
#include "util.h"
#include "log.h"
#include "mstring.h"
#include "snort.h"
#include <stdio.h>
#include <stdlib.h>

Go to the source code of this file.

Typedefs
typedef _SpoAlertFullData	SpoAlertFullData
Functions
void	AlertFullInit (u_char *)
SpoAlertFullData *	ParseAlertFullArgs (char *)
void	AlertFull (Packet *, char *, void *, Event *)
void	AlertFullCleanExit (int, void *)
void	AlertFullRestart (int, void *)
void	AlertFullSetup (void)

---

Typedef Documentation

typedef struct _SpoAlertFullData SpoAlertFullData

---

Function Documentation

void AlertFull (  Packet *  , char *  , void *  , Event *  )

Definition at line 122 of file spo_alert_full.c. References _progvars::alert_interface_flag, bzero, DEBUG_LOG, DEBUG_WRAP, _SpoAlertFullData::file, _Packet::frag_flag, _progvars::interface, _IPHdr::ip_proto, _Packet::iph, NULL, _Packet::pkth, Print2ndHeader(), PRINT_INTERFACE, PrintICMPHeader(), PrintIPHeader(), PrintPriorityData(), PrintTCPHeader(), PrintUDPHeader(), PrintXrefs(), pv, _progvars::show2hdr_flag, _Event::sig_generator, _Event::sig_id, _Event::sig_rev, TIMEBUF_SIZE, pcap_pkthdr::ts, and ts_print(). Referenced by AlertFullInit().

void AlertFullCleanExit (  int  , void *  )

Definition at line 259 of file spo_alert_full.c. References DEBUG_LOG, DEBUG_WRAP, and _SpoAlertFullData::file. Referenced by AlertFullInit().

void AlertFullInit (  u_char *   )

Definition at line 105 of file spo_alert_full.c. References AddFuncToCleanExitList(), AddFuncToOutputList(), AddFuncToRestartList(), _progvars::alert_plugin_active, AlertFull(), AlertFullCleanExit(), AlertFullRestart(), DEBUG_INIT, DEBUG_WRAP, NT_OUTPUT_ALERT, ParseAlertFullArgs(), and pv. Referenced by AlertFullSetup().

void AlertFullRestart (  int  , void *  )

Definition at line 269 of file spo_alert_full.c. References DEBUG_LOG, DEBUG_WRAP, and _SpoAlertFullData::file. Referenced by AlertFullInit().

void AlertFullSetup (  void   )

Definition at line 84 of file spo_alert_full.c. References AlertFullInit(), DEBUG_INIT, DEBUG_WRAP, NT_OUTPUT_ALERT, and RegisterOutputPlugin(). Referenced by InitOutputPlugins().

SpoAlertFullData * ParseAlertFullArgs (  char *   )

Definition at line 231 of file spo_alert_full.c. References DEBUG_LOG, DEBUG_WRAP, _SpoAlertFullData::file, mSplit(), mSplitFree(), NULL, OpenAlertFile(), ProcessFileOption(), SnortAlloc(), and strcasecmp. Referenced by AlertFullInit().

---