parser

Documentation

Index

• type Datastore
• type FSImporter
  • func NewFSImporter(resources *database.Resources, indexingThreads int, parseThreads int) *FSImporter
  • func (fs *FSImporter) Run(datastore Datastore)
• type ImportedData
• type MongoDatastore
  • func NewMongoDatastore(session *mgo.Session, metaDB *database.MetaDBHandle, bufferSize int, ...) *MongoDatastore
  • func (mongo *MongoDatastore) Flush()
  • func (mongo *MongoDatastore) Index()
  • func (mongo *MongoDatastore) Store(data *ImportedData)

Types

type Datastore

type Datastore interface {
	Store(*ImportedData)
	Flush()
	Index()
}

Datastore allows RITA to store bro data in a database

type FSImporter

type FSImporter struct {
	// contains filtered or unexported fields
}

FSImporter provides the ability to import bro files from the file system

func NewFSImporter

func NewFSImporter(resources *database.Resources,
	indexingThreads int, parseThreads int) *FSImporter

NewFSImporter creates a new file system importer

func (*FSImporter) Run

func (fs *FSImporter) Run(datastore Datastore)

Run starts importing a given path into a datastore

type ImportedData

type ImportedData struct {
	BroData          parsetypes.BroData
	TargetDatabase   string
	TargetCollection string
}

ImportedData directs BroData to a specific database and collection

type MongoDatastore

type MongoDatastore struct {
	// contains filtered or unexported fields
}

MongoDatastore provides a backend for storing bro data in MongoDB

func NewMongoDatastore

func NewMongoDatastore(session *mgo.Session, metaDB *database.MetaDBHandle,
	bufferSize int, logger *log.Logger) *MongoDatastore

NewMongoDatastore returns a new MongoDatastore and caches the existing db names

func (*MongoDatastore) Flush

func (mongo *MongoDatastore) Flush()

Flush waits for all writing to finish

func (*MongoDatastore) Index

func (mongo *MongoDatastore) Index()

Index ensures that the data is searchable

func (*MongoDatastore) Store

func (mongo *MongoDatastore) Store(data *ImportedData)

Store saves parsed Bro data to MongoDB. Additionally, it caches some information to create indices later on