X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?p=ossec-hids.git;a=blobdiff_plain;f=src%2Fheaders%2Frules_op.h;h=1b80e08d3178fac9e0af93cc87da3b6aac012bd6;hp=dd03e638c139f4e3e47b3db4f3326c4fba6cce03;hb=6ef2f786c6c8ead94841b5f93baf9f43421f08c8;hpb=301048b51990573e58a30dc4a5bb4ec285cad554 diff --git a/src/headers/rules_op.h b/src/headers/rules_op.h index dd03e63..1b80e08 100755 --- a/src/headers/rules_op.h +++ b/src/headers/rules_op.h @@ -1,4 +1,5 @@ -/* @(#) $Id$ */ +/* @(#) $Id: ./src/headers/rules_op.h, 2011/09/08 dcid Exp $ + */ /* Copyright (C) 2009 Trend Micro Inc. * All rights reserved. @@ -11,9 +12,9 @@ * License details at the LICENSE file included with OSSEC or * online at: http://www.ossec.net/en/licensing.html */ - + /* Common API for dealing with directory trees */ - + #ifndef _OS_RULESOP_H #define _OS_RULESOP_H @@ -93,7 +94,7 @@ typedef struct _RuleInfo int __frequency; char **last_events; - + /* Not an option in the rule */ u_int16_t alert_opts; @@ -103,7 +104,7 @@ typedef struct _RuleInfo /* category */ u_int8_t category; - + /* Decoded as */ u_int16_t decoded_as; @@ -125,7 +126,7 @@ typedef struct _RuleInfo /* Function pointer to the event_search. */ void *(*event_search)(void *lf, void *rule); - + char *group; OSMatch *match; @@ -147,11 +148,11 @@ typedef struct _RuleInfo OSMatch *program_name; OSMatch *extra_data; char *action; - + char *comment; /* description in the xml */ char *info; char *cve; - + char *if_sid; char *if_level; char *if_group; @@ -159,14 +160,14 @@ typedef struct _RuleInfo OSRegex *if_matched_regex; OSMatch *if_matched_group; int if_matched_sid; - + void **ar; }RuleInfo; /** Prototypes **/ -int OS_ReadXMLRules(char *rulefile, +int OS_ReadXMLRules(char *rulefile, void *(*ruleact_function)(RuleInfo *rule, void *data), void *data);