1 # Copyright (C) 2009 Trend Micro Inc.
4 # This program is a free software; you can redistribute it
5 # and/or modify it under the terms of the GNU General Public
6 # License (version 2) as published by the FSF - Free Software
10 CREATE TABLE IF NOT EXISTS category
12 cat_id INT UNSIGNED NOT NULL AUTO_INCREMENT,
13 cat_name VARCHAR(32) NOT NULL UNIQUE,
17 CREATE TABLE IF NOT EXISTS signature
19 id int UNSIGNED NOT NULL AUTO_INCREMENT,
20 rule_id MEDIUMINT UNSIGNED NOT NULL UNIQUE,
21 level TINYINT UNSIGNED,
22 description VARCHAR(255) NOT NULL,
28 CREATE TABLE IF NOT EXISTS signature_category_mapping
30 id INT UNSIGNED NOT NULL AUTO_INCREMENT,
31 rule_id MEDIUMINT UNSIGNED NOT NULL,
32 cat_id SMALLINT UNSIGNED NOT NULL,
33 PRIMARY KEY (id, rule_id, cat_id)
36 CREATE TABLE IF NOT EXISTS server
38 id SMALLINT UNSIGNED NOT NULL AUTO_INCREMENT,
39 last_contact INT UNSIGNED NOT NULL,
40 version VARCHAR(32) NOT NULL,
41 hostname VARCHAR(64) NOT NULL UNIQUE,
42 information TEXT NOT NULL,
46 CREATE TABLE IF NOT EXISTS agent
48 id SMALLINT UNSIGNED NOT NULL AUTO_INCREMENT,
49 server_id SMALLINT UNSIGNED NOT NULL,
50 last_contact INT UNSIGNED NOT NULL,
51 ip_address VARCHAR(46) NOT NULL,
52 version VARCHAR(32) NOT NULL,
53 name VARCHAR(64) NOT NULL,
54 information VARCHAR(128) NOT NULL,
55 PRIMARY KEY (id, server_id)
58 CREATE TABLE IF NOT EXISTS location
60 id SMALLINT UNSIGNED NOT NULL AUTO_INCREMENT,
61 server_id SMALLINT UNSIGNED NOT NULL,
62 name VARCHAR(128) NOT NULL,
63 PRIMARY KEY (id, server_id)
66 CREATE TABLE IF NOT EXISTS alert
68 id INT UNSIGNED NOT NULL AUTO_INCREMENT,
69 server_id SMALLINT UNSIGNED NOT NULL,
70 rule_id MEDIUMINT UNSIGNED NOT NULL,
71 level TINYINT UNSIGNED,
72 timestamp INT UNSIGNED NOT NULL,
73 location_id SMALLINT UNSIGNED NOT NULL,
76 src_port SMALLINT UNSIGNED,
77 dst_port SMALLINT UNSIGNED,
78 alertid VARCHAR(30) DEFAULT NULL,
80 full_log TEXT NOT NULL,
81 is_hidden TINYINT NOT NULL DEFAULT '0',
82 tld VARCHAR(5) NOT NULL DEFAULT '',
83 PRIMARY KEY (id, server_id),
86 INDEX time (timestamp),