Engine

Documentation

Index

• Variables
• func Run(data string)
• type Baseline
  • func GetBaseline() (bsl Baseline)
• type Condition
• type Counter
• type Header
• type PostData
• type Req
• type Rule
  • func ReadRules() []Rule

Variables

var Acceptlanguage_counter []Counter

var Contenttype_counter []Counter

var Host_counter []Counter

var IP_counter []Counter

var traffic_counter []Counter

var Referer_counter []Counter

var Requests []Req

var Useragent_counter []Counter

Functions

func Run

func Run(data string)

Types

type Baseline

type Baseline struct {
	gorm.Model
	Traffic             int
	UserAgent           string
	UserAgentCount      uint
	IPCount             uint
	ContentType         string
	ContentTypeCount    uint
	Traffic_Date        string
	Host                string
	HostCount           uint
	Referer             string
	RefererCount        uint
	AcceptLanguage      string
	AcceptLanguageCount uint
}

func GetBaseline

func GetBaseline() (bsl Baseline)

type Condition

type Condition struct {
	Name        string
	NameString  string
	History     bool
	Dir         string
	Headers     []Header
	Normal      string
	Anomaly     string
	Description string
	RiskLevel   int
}

type Counter

type Counter struct {
	Key   string
	Count int
}

type Header

type Header struct {
	Key   string
	Value string
}

type PostData

type PostData struct {
	Name            string    `json:"Name"`
	IncidentTime    time.Time `json:"IncidentTime"`
	ImportanceLevel int       `json:"ImportanceLevel"`
	Description     string    `json:"Description"`
	Repetition      int       `json:"Repetition"`
	Prevention      string    `json:"Prevention"`
	Processed       int       `json:"Processed"`
	CauseType       string    `json:"CauseType"`
	SrcIP           string    `json:"SrcIP"`
	SrcMac          string    `json:"SrcMac"`
}

type Req

type Req struct {
	Method      string `json:"Method"`
	Dir         string `json:"Dir"`
	HTTPVersion string `json:"HTTPVersion"`
	Headers     []struct {
		Key   string `json:"Key"`
		Value string `json:"Value"`
	} `json:"Headers"`
	Content string `json:"Content"`
	SrcIP   string `json:"SrcIP"`
	DstIP   string `json:"DstIP"`
	SrcMac  string `json:"SrcMac"`
	DstMac  string `json:"DstMac"`
}

type Rule

type Rule struct {
	RuleName string
	Content  string
}

func ReadRules

func ReadRules() []Rule