static int setup_analyzer(idmef_analyzer_t *analyzer) { int ret; prelude_string_t *string; ret = idmef_analyzer_new_model(analyzer, &string); if ( ret < 0 ) return ret; prelude_string_set_constant(string, ANALYZER_MODEL); ret = idmef_analyzer_new_class(analyzer, &string); if ( ret < 0 ) return ret; prelude_string_set_constant(string, ANALYZER_CLASS); ret = idmef_analyzer_new_manufacturer(analyzer, &string); if ( ret < 0 ) return ret; prelude_string_set_constant(string, ANALYZER_MANUFACTURER); ret = idmef_analyzer_new_version(analyzer, &string); if ( ret < 0 ) return ret; prelude_string_set_constant(string, VERSION); return 0; }
static int setup_analyzer(idmef_analyzer_t *analyzer, const char *analyzer_model, const char *analyzer_class, const char *analyzer_manufacturer) { int ret; prelude_string_t *string; ret = idmef_analyzer_new_model(analyzer, &string); if ( ret < 0 ) return ret; prelude_string_set_constant(string, analyzer_model); ret = idmef_analyzer_new_class(analyzer, &string); if ( ret < 0 ) return ret; prelude_string_set_constant(string, analyzer_class); ret = idmef_analyzer_new_manufacturer(analyzer, &string); if ( ret < 0 ) return ret; prelude_string_set_constant(string, analyzer_manufacturer); ret = idmef_analyzer_new_version(analyzer, &string); if ( ret < 0 ) return ret; prelude_string_set_constant(string, VERSION); return 0; }
static int setup_analyzer(idmef_analyzer_t *analyzer) { int ret; prelude_string_t *string; ret = idmef_analyzer_new_model(analyzer, &string); if ( ret < 0 ) goto err; prelude_string_set_constant(string, ANALYZER_MODEL); ret = idmef_analyzer_new_class(analyzer, &string); if ( ret < 0 ) goto err; prelude_string_set_constant(string, ANALYZER_CLASS); ret = idmef_analyzer_new_manufacturer(analyzer, &string); if ( ret < 0 ) goto err; prelude_string_set_constant(string, ANALYZER_MANUFACTURER); ret = idmef_analyzer_new_version(analyzer, &string); if ( ret < 0 ) goto err; prelude_string_set_constant(string, ANALYZER_VERSION); return 0; err: merror("%s: OSSEC2Prelude: %s: IDMEF error: %s.", ARGV0, prelude_strsource(ret), prelude_strerror(ret)); return -1; }
int idmef_analyzer_setup(idmef_analyzer_t *analyzer, const char *analyzer_name){ int ret; prelude_string_t *str; /* alert->analyzer->name */ ret = idmef_analyzer_new_name(analyzer, &str); if ( ret < 0 ) return ret; prelude_string_set_constant(str, analyzer_name); /* alert->analyzer->model */ ret = idmef_analyzer_new_model(analyzer, &str); if ( ret < 0 ) return ret; prelude_string_set_constant(str, ANALYZER_MODEL ); /* alert->analyzer->class */ ret = idmef_analyzer_new_class(analyzer, &str); if ( ret < 0 ) return ret; prelude_string_set_constant(str, ANALYZER_CLASS); /* alert->analyzer->manufacturer */ ret = idmef_analyzer_new_manufacturer(analyzer, &str); if ( ret < 0 ) return ret; prelude_string_set_constant(str, ANALYZER_MANUFACTURER); /* alert->analyzer->version */ ret = idmef_analyzer_new_version(analyzer, &str); if ( ret < 0 ) return ret; prelude_string_set_constant(str, get_version()); return 0; }
/** * \brief Initialize analyzer description * * \return 0 if ok */ static int SetupAnalyzer(idmef_analyzer_t *analyzer) { int ret; prelude_string_t *string; SCEnter(); ret = idmef_analyzer_new_model(analyzer, &string); if (unlikely(ret < 0)) { SCLogDebug("%s: error creating analyzer model: %s.", prelude_strsource(ret), prelude_strerror(ret)); SCReturnInt(ret); } ret = prelude_string_set_constant(string, ANALYZER_MODEL); if (unlikely(ret < 0)) { SCLogDebug("%s: error setting analyzer model: %s.", prelude_strsource(ret), prelude_strerror(ret)); SCReturnInt(ret); } ret = idmef_analyzer_new_class(analyzer, &string); if (unlikely(ret < 0)) { SCLogDebug("%s: error creating analyzer class: %s.", prelude_strsource(ret), prelude_strerror(ret)); SCReturnInt(ret); } ret = prelude_string_set_constant(string, ANALYZER_CLASS); if (unlikely(ret < 0)) { SCLogDebug("%s: error setting analyzer class: %s.", prelude_strsource(ret), prelude_strerror(ret)); SCReturnInt(ret); } ret = idmef_analyzer_new_manufacturer(analyzer, &string); if (unlikely(ret < 0)) { SCLogDebug("%s: error creating analyzer manufacturer: %s.", prelude_strsource(ret), prelude_strerror(ret)); SCReturnInt(ret); } ret = prelude_string_set_constant(string, ANALYZER_MANUFACTURER); if (unlikely(ret < 0)) { SCLogDebug("%s: error setting analyzer manufacturer: %s.", prelude_strsource(ret), prelude_strerror(ret)); SCReturnInt(ret); } ret = idmef_analyzer_new_version(analyzer, &string); if (unlikely(ret < 0)) { SCLogDebug("%s: error creating analyzer version: %s.", prelude_strsource(ret), prelude_strerror(ret)); SCReturnInt(ret); } ret = prelude_string_set_constant(string, VERSION); if (unlikely(ret < 0)) { SCLogDebug("%s: error setting analyzer version: %s.", prelude_strsource(ret), prelude_strerror(ret)); SCReturnInt(ret); } SCReturnInt(0); }