X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?a=blobdiff_plain;f=src%2Flogcollector%2Flogcollector.h;h=694bac45d935c28f7a7c217449d43f726f124446;hb=3f728675941dc69d4e544d3a880a56240a6e394a;hp=6117b643393d6ec743769194e544329cc30a4c3a;hpb=301048b51990573e58a30dc4a5bb4ec285cad554;p=ossec-hids.git diff --git a/src/logcollector/logcollector.h b/src/logcollector/logcollector.h old mode 100755 new mode 100644 index 6117b64..694bac4 --- a/src/logcollector/logcollector.h +++ b/src/logcollector/logcollector.h @@ -1,5 +1,3 @@ -/* @(#) $Id$ */ - /* Copyright (C) 2009 Trend Micro Inc. * All right reserved. * @@ -9,32 +7,24 @@ * Foundation */ - - #ifndef __LOGREADER_H - #define __LOGREADER_H #ifndef ARGV0 #define ARGV0 "ossec-logcollector" #endif - #include "shared.h" #include "config/localfile-config.h" #include "config/config.h" - - - /*** Function prototypes ***/ - /* Read logcollector config */ -int LogCollectorConfig(char * cfgfile); +int LogCollectorConfig(const char *cfgfile, int accept_remote); -/* Stary log collector daemon */ -void LogCollectorStart(); +/* Start log collector daemon */ +void LogCollectorStart(void) __attribute__((noreturn)); /* Handle files */ int handle_file(int i, int do_fseek, int do_log); @@ -45,6 +35,9 @@ void *read_syslog(int pos, int *rc, int drop_it); /* Read snort full file */ void *read_snortfull(int pos, int *rc, int drop_it); +/* Read ossec alert file */ +void *read_ossecalert(int pos, int *rc, int drop_it); + /* Read nmap grepable format */ void *read_nmapg(int pos, int *rc, int drop_it); @@ -57,35 +50,34 @@ void *read_mssql_log(int pos, int *rc, int drop_it); /* Read postgresql log format */ void *read_postgresql_log(int pos, int *rc, int drop_it); -/* read multi line logs. */ +/* read multi line logs */ void *read_multiline(int pos, int *rc, int drop_it); /* Read DJB multilog format */ -/* Initializes multilog. */ +/* Initializes multilog */ int init_djbmultilog(int pos); void *read_djbmultilog(int pos, int *rc, int drop_it); - /* Read events from output of command */ void *read_command(int pos, int *rc, int drop_it); void *read_fullcommand(int pos, int *rc, int drop_it); +/* Read auditd events */ +void *read_audit(int pos, int *rc, int drop_it); #ifdef WIN32 -/* Windows only */ void win_startel(); void win_readel(); void win_read_vista_sec(); +void win_start_event_channel(char *evt_log, char future, char *query); +void win_format_event_string(char *string); #endif - /*** Global variables ***/ +extern int loop_timeout; +extern int logr_queue; +extern int open_file_attempts; +extern logreader *logff; +#endif /* __LOGREADER_H */ -int loop_timeout; -int logr_queue; -int open_file_attempts; -logreader *logff; - - -#endif