Top | ![]() |
![]() |
![]() |
![]() |
The IDMEF API is used by a sensor in order to generate events. IDMEF is an alert description format allowing almost any alert information to fit within an IDMEF alert, independantly of the type of analyzer used.
Here is real world example taken from the Snort Prelude sensors. The top level IDMEF object is always of type idmef_message_t. You should refer to the IDMEF draft, or to the Prelude API documentation in order to get a complete listing of theses objects, or a description of what information an object may carry.
void snort_alert_prelude(Packet *p, char *msg, void *data, Event *event) { int ret; idmef_time_t *time; idmef_alert_t *alert; prelude_string_t *str; idmef_message_t *idmef; idmef_classification_t *class; prelude_client_t *client = data; ret = idmef_message_new(&idmef); if ( ret < 0 ) return; ret = idmef_message_new_alert(idmef, &alert); if ( ret < 0 ) goto err; ret = idmef_alert_new_classification(alert, &class); if ( ret < 0 ) goto err; ret = idmef_classification_new_text(class, &str); if ( ret < 0 ) goto err; prelude_string_set_ref(str, msg); ret = event_to_impact(event, alert); if ( ret < 0 ) goto err; ret = event_to_reference(event, class); if ( ret < 0 ) goto err; ret = event_to_source_target(p, alert); if ( ret < 0 ) goto err; ret = packet_to_data(p, event, alert); if ( ret < 0 ) goto err; ret = idmef_alert_new_detect_time(alert, &time); if ( ret < 0 ) goto err; idmef_time_set_from_timeval(time, &p->pkth->ts); ret = idmef_time_new_from_gettimeofday(&time); if ( ret < 0 ) goto err; idmef_alert_set_create_time(alert, time); idmef_alert_set_analyzer(alert, idmef_analyzer_ref(prelude_client_get_analyzer(client)), 0); prelude_client_send_idmef(client, idmef); err: idmef_message_destroy(idmef); prelude_perror(ret, "Unable to create IDMEF alert"); }
int idmef_message_get_data (idmef_message_t *message
,const char *path
,unsigned char **data
,size_t *size
);
int idmef_message_get_number (idmef_message_t *message
,const char *path
,double *result
);
Retrieve the number stored within path
of message
and store it
in the user provided result
.
message |
Pointer to an idmef_message_t object. |
|
path |
Path to retrieve the number from within |
|
result |
Pointer where the result should be stored. |
int idmef_message_get_string (idmef_message_t *message
,const char *path
,char **result
);
Retrieve the string stored within path
of message
and store it
in the user provided result
.
The caller is responssible for freeing result
.
message |
Pointer to an idmef_message_t object. |
|
path |
Path to retrieve the string from within |
|
result |
Pointer where the result should be stored. |
int idmef_message_get_value (idmef_message_t *message
,const char *path
,idmef_value_t **value
);
Retrieve the value stored within path
of message
and store it
in the user provided value
.
message |
Pointer to an idmef_message_t object. |
|
path |
Path to retrieve the value from within |
|
value |
Pointer where the result should be stored. |
int idmef_message_set_data (idmef_message_t *message
,const char *path
,const unsigned char *data
,size_t size
);
This function will set the path
member within message
to the
provided data
of size size
.
message |
Pointer to an idmef_message_t object. |
|
path |
Path to be set within |
|
data |
Pointer to data to associate |
|
size |
Size of the data pointed to by |
int idmef_message_set_number (idmef_message_t *message
,const char *path
,double number
);
This function will set the path
member within message
to the
provided value
, which will be converted to the path
value type.
Example: idmef_message_set_number(message, "alert.assessment.confidence.confidence", 0.123456); idmef_message_set_number(message, "alert.source(0).service.port", 1024);
message |
Pointer to an idmef_message_t object. |
|
path |
Path to be set within |
|
number |
Value to associate |
int idmef_message_set_string (idmef_message_t *message
,const char *path
,const char *value
);
This function will set the path
member within message
to the
provided value
, which will be converted to the corresponding
path
value type.
Example: idmef_message_set_string(message, "alert.classification.text", "MyText"); idmef_message_set_string(message, "alert.source(0).service.port", "1024");
message |
Pointer to an idmef_message_t object. |
|
path |
Path to be set within |
|
value |
Value to associate |
int idmef_message_set_value (idmef_message_t *message
,const char *path
,idmef_value_t *value
);
This function will set the path
member within message
to the
provided value
.
message |
Pointer to an idmef_message_t object. |
|
path |
Path to be set within |
|
value |
Value to associate |
idmef_additional_data_type_t
idmef_additional_data_type_to_numeric (const char *name
);
const char *
idmef_additional_data_type_to_string (idmef_additional_data_type_t val
);
Return the IDMEF string equivalent of val
provided idmef_additional_data_type_t value.
int
idmef_additional_data_new (idmef_additional_data_t **ret
);
Create a new idmef_additional_data_t object.
int idmef_additional_data_copy (const idmef_additional_data_t *src
,idmef_additional_data_t *dst
);
Copy a new idmef_additional_data_t object from src
to dst
.
int idmef_additional_data_clone (idmef_additional_data_t *src
,idmef_additional_data_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_additional_data_t *
idmef_additional_data_ref (idmef_additional_data_t *additional_data
);
Increase additional_data
reference count, so that it can be referenced
multiple time.
void
idmef_additional_data_destroy (idmef_additional_data_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
idmef_additional_data_type_t
idmef_additional_data_get_type (idmef_additional_data_t *ptr
);
Get type children of the idmef_additional_data_t object.
void idmef_additional_data_set_type (idmef_additional_data_t *ptr
,idmef_additional_data_type_t type
);
Set type
object as a children of ptr
.
if ptr
already contain an type
object, then it is destroyed,
and updated to point to the provided type
object.
ptr |
pointer to a idmef_additional_data_t object. |
|
type |
pointer to a idmef_additional_data_type_t object. |
int idmef_additional_data_new_type (idmef_additional_data_t *ptr
,idmef_additional_data_type_t **ret
);
Create a new type object, children of idmef_additional_data_t.
If ptr
already contain a idmef_additional_data_type_t object, then it is destroyed.
ptr |
pointer to a idmef_additional_data_t object. |
|
ret |
pointer to an address where to store the created idmef_additional_data_type_t object. |
prelude_string_t *
idmef_additional_data_get_meaning (idmef_additional_data_t *ptr
);
void idmef_additional_data_set_meaning (idmef_additional_data_t *ptr
,prelude_string_t *meaning
);
Set meaning
object as a children of ptr
.
if ptr
already contain an meaning
object, then it is destroyed,
and updated to point to the provided meaning
object.
ptr |
pointer to a idmef_additional_data_t object. |
|
meaning |
pointer to a prelude_string_t object. |
int idmef_additional_data_new_meaning (idmef_additional_data_t *ptr
,prelude_string_t **ret
);
Create a new meaning object, children of idmef_additional_data_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_additional_data_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_data_t *
idmef_additional_data_get_data (idmef_additional_data_t *ptr
);
void idmef_additional_data_set_data (idmef_additional_data_t *ptr
,idmef_data_t *data
);
Set data
object as a children of ptr
.
if ptr
already contain an data
object, then it is destroyed,
and updated to point to the provided data
object.
int idmef_additional_data_new_data (idmef_additional_data_t *ptr
,idmef_data_t **ret
);
Create a new data object, children of idmef_additional_data_t.
If ptr
already contain a idmef_data_t object, then it is destroyed.
ptr |
pointer to a idmef_additional_data_t object. |
|
ret |
pointer to an address where to store the created idmef_data_t object. |
idmef_reference_origin_t
idmef_reference_origin_to_numeric (const char *name
);
const char *
idmef_reference_origin_to_string (idmef_reference_origin_t val
);
Return the IDMEF string equivalent of val
provided idmef_reference_origin_t value.
int
idmef_reference_new (idmef_reference_t **ret
);
Create a new idmef_reference_t object.
int idmef_reference_copy (const idmef_reference_t *src
,idmef_reference_t *dst
);
Copy a new idmef_reference_t object from src
to dst
.
int idmef_reference_clone (idmef_reference_t *src
,idmef_reference_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_reference_t *
idmef_reference_ref (idmef_reference_t *reference
);
Increase reference
reference count, so that it can be referenced
multiple time.
void
idmef_reference_destroy (idmef_reference_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
idmef_reference_origin_t
idmef_reference_get_origin (idmef_reference_t *ptr
);
Get origin children of the idmef_reference_t object.
void idmef_reference_set_origin (idmef_reference_t *ptr
,idmef_reference_origin_t origin
);
Set origin
object as a children of ptr
.
if ptr
already contain an origin
object, then it is destroyed,
and updated to point to the provided origin
object.
ptr |
pointer to a idmef_reference_t object. |
|
origin |
pointer to a idmef_reference_origin_t object. |
int idmef_reference_new_origin (idmef_reference_t *ptr
,idmef_reference_origin_t **ret
);
Create a new origin object, children of idmef_reference_t.
If ptr
already contain a idmef_reference_origin_t object, then it is destroyed.
ptr |
pointer to a idmef_reference_t object. |
|
ret |
pointer to an address where to store the created idmef_reference_origin_t object. |
void idmef_reference_set_name (idmef_reference_t *ptr
,prelude_string_t *name
);
Set name
object as a children of ptr
.
if ptr
already contain an name
object, then it is destroyed,
and updated to point to the provided name
object.
int idmef_reference_new_name (idmef_reference_t *ptr
,prelude_string_t **ret
);
Create a new name object, children of idmef_reference_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_reference_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_reference_set_url (idmef_reference_t *ptr
,prelude_string_t *url
);
Set url
object as a children of ptr
.
if ptr
already contain an url
object, then it is destroyed,
and updated to point to the provided url
object.
int idmef_reference_new_url (idmef_reference_t *ptr
,prelude_string_t **ret
);
Create a new url object, children of idmef_reference_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_reference_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
prelude_string_t *
idmef_reference_get_meaning (idmef_reference_t *ptr
);
void idmef_reference_set_meaning (idmef_reference_t *ptr
,prelude_string_t *meaning
);
Set meaning
object as a children of ptr
.
if ptr
already contain an meaning
object, then it is destroyed,
and updated to point to the provided meaning
object.
int idmef_reference_new_meaning (idmef_reference_t *ptr
,prelude_string_t **ret
);
Create a new meaning object, children of idmef_reference_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_reference_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
int
idmef_classification_new (idmef_classification_t **ret
);
Create a new idmef_classification_t object.
int idmef_classification_copy (const idmef_classification_t *src
,idmef_classification_t *dst
);
Copy a new idmef_classification_t object from src
to dst
.
int idmef_classification_clone (idmef_classification_t *src
,idmef_classification_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_classification_t *
idmef_classification_ref (idmef_classification_t *classification
);
Increase classification
reference count, so that it can be referenced
multiple time.
void
idmef_classification_destroy (idmef_classification_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
prelude_string_t *
idmef_classification_get_ident (idmef_classification_t *ptr
);
void idmef_classification_set_ident (idmef_classification_t *ptr
,prelude_string_t *ident
);
Set ident
object as a children of ptr
.
if ptr
already contain an ident
object, then it is destroyed,
and updated to point to the provided ident
object.
ptr |
pointer to a idmef_classification_t object. |
|
ident |
pointer to a prelude_string_t object. |
int idmef_classification_new_ident (idmef_classification_t *ptr
,prelude_string_t **ret
);
Create a new ident object, children of idmef_classification_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_classification_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
prelude_string_t *
idmef_classification_get_text (idmef_classification_t *ptr
);
void idmef_classification_set_text (idmef_classification_t *ptr
,prelude_string_t *text
);
Set text
object as a children of ptr
.
if ptr
already contain an text
object, then it is destroyed,
and updated to point to the provided text
object.
ptr |
pointer to a idmef_classification_t object. |
|
text |
pointer to a prelude_string_t object. |
int idmef_classification_new_text (idmef_classification_t *ptr
,prelude_string_t **ret
);
Create a new text object, children of idmef_classification_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_classification_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_reference_t * idmef_classification_get_next_reference (idmef_classification_t *classification
,idmef_reference_t *reference_cur
);
Get the next idmef_reference_t object listed in ptr
.
When iterating over the idmef_reference_t object listed in ptr
,
object
should be set to the latest returned idmef_reference_t object.
classification |
pointer to a idmef_classification_t object. |
|
reference_cur |
pointer to a idmef_reference_t object. |
void idmef_classification_set_reference (idmef_classification_t *ptr
,idmef_reference_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_reference_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_classification_t object. |
|
object |
pointer to a idmef_reference_t object. |
|
pos |
Position in the list. |
int idmef_classification_new_reference (idmef_classification_t *ptr
,idmef_reference_t **ret
,int pos
);
Create a new idmef_reference_t children of ptr
, and add it to position pos
of
ptr
list of idmef_reference_t object. The created idmef_reference_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_classification_t object. |
|
ret |
pointer to an address where to store the created idmef_reference_t object. |
|
pos |
position in the list. |
idmef_user_id_type_t
idmef_user_id_type_to_numeric (const char *name
);
const char *
idmef_user_id_type_to_string (idmef_user_id_type_t val
);
Return the IDMEF string equivalent of val
provided idmef_user_id_type_t value.
int
idmef_user_id_new (idmef_user_id_t **ret
);
Create a new idmef_user_id_t object.
int idmef_user_id_copy (const idmef_user_id_t *src
,idmef_user_id_t *dst
);
Copy a new idmef_user_id_t object from src
to dst
.
int idmef_user_id_clone (idmef_user_id_t *src
,idmef_user_id_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_user_id_t *
idmef_user_id_ref (idmef_user_id_t *user_id
);
Increase user_id
reference count, so that it can be referenced
multiple time.
void
idmef_user_id_destroy (idmef_user_id_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
void idmef_user_id_set_ident (idmef_user_id_t *ptr
,prelude_string_t *ident
);
Set ident
object as a children of ptr
.
if ptr
already contain an ident
object, then it is destroyed,
and updated to point to the provided ident
object.
int idmef_user_id_new_ident (idmef_user_id_t *ptr
,prelude_string_t **ret
);
Create a new ident object, children of idmef_user_id_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_user_id_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_user_id_type_t
idmef_user_id_get_type (idmef_user_id_t *ptr
);
Get type children of the idmef_user_id_t object.
void idmef_user_id_set_type (idmef_user_id_t *ptr
,idmef_user_id_type_t type
);
Set type
object as a children of ptr
.
if ptr
already contain an type
object, then it is destroyed,
and updated to point to the provided type
object.
int idmef_user_id_new_type (idmef_user_id_t *ptr
,idmef_user_id_type_t **ret
);
Create a new type object, children of idmef_user_id_t.
If ptr
already contain a idmef_user_id_type_t object, then it is destroyed.
ptr |
pointer to a idmef_user_id_t object. |
|
ret |
pointer to an address where to store the created idmef_user_id_type_t object. |
void idmef_user_id_set_tty (idmef_user_id_t *ptr
,prelude_string_t *tty
);
Set tty
object as a children of ptr
.
if ptr
already contain an tty
object, then it is destroyed,
and updated to point to the provided tty
object.
int idmef_user_id_new_tty (idmef_user_id_t *ptr
,prelude_string_t **ret
);
Create a new tty object, children of idmef_user_id_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_user_id_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_user_id_set_name (idmef_user_id_t *ptr
,prelude_string_t *name
);
Set name
object as a children of ptr
.
if ptr
already contain an name
object, then it is destroyed,
and updated to point to the provided name
object.
int idmef_user_id_new_name (idmef_user_id_t *ptr
,prelude_string_t **ret
);
Create a new name object, children of idmef_user_id_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_user_id_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_user_id_set_number (idmef_user_id_t *ptr
,uint32_t number
);
Set number
object as a children of ptr
.
if ptr
already contain an number
object, then it is destroyed,
and updated to point to the provided number
object.
int idmef_user_id_new_number (idmef_user_id_t *ptr
,uint32_t **ret
);
Create a new number object, children of idmef_user_id_t.
If ptr
already contain a uint32_t object, then it is destroyed.
ptr |
pointer to a idmef_user_id_t object. |
|
ret |
pointer to an address where to store the created uint32_t object. |
idmef_user_category_t
idmef_user_category_to_numeric (const char *name
);
const char *
idmef_user_category_to_string (idmef_user_category_t val
);
Return the IDMEF string equivalent of val
provided idmef_user_category_t value.
int idmef_user_copy (const idmef_user_t *src
,idmef_user_t *dst
);
Copy a new idmef_user_t object from src
to dst
.
int idmef_user_clone (idmef_user_t *src
,idmef_user_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_user_t *
idmef_user_ref (idmef_user_t *user
);
Increase user
reference count, so that it can be referenced
multiple time.
void
idmef_user_destroy (idmef_user_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
void idmef_user_set_ident (idmef_user_t *ptr
,prelude_string_t *ident
);
Set ident
object as a children of ptr
.
if ptr
already contain an ident
object, then it is destroyed,
and updated to point to the provided ident
object.
int idmef_user_new_ident (idmef_user_t *ptr
,prelude_string_t **ret
);
Create a new ident object, children of idmef_user_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_user_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_user_category_t
idmef_user_get_category (idmef_user_t *ptr
);
Get category children of the idmef_user_t object.
void idmef_user_set_category (idmef_user_t *ptr
,idmef_user_category_t category
);
Set category
object as a children of ptr
.
if ptr
already contain an category
object, then it is destroyed,
and updated to point to the provided category
object.
ptr |
pointer to a idmef_user_t object. |
|
category |
pointer to a idmef_user_category_t object. |
int idmef_user_new_category (idmef_user_t *ptr
,idmef_user_category_t **ret
);
Create a new category object, children of idmef_user_t.
If ptr
already contain a idmef_user_category_t object, then it is destroyed.
ptr |
pointer to a idmef_user_t object. |
|
ret |
pointer to an address where to store the created idmef_user_category_t object. |
idmef_user_id_t * idmef_user_get_next_user_id (idmef_user_t *user
,idmef_user_id_t *user_id_cur
);
Get the next idmef_user_id_t object listed in ptr
.
When iterating over the idmef_user_id_t object listed in ptr
,
object
should be set to the latest returned idmef_user_id_t object.
void idmef_user_set_user_id (idmef_user_t *ptr
,idmef_user_id_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_user_id_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_user_t object. |
|
object |
pointer to a idmef_user_id_t object. |
|
pos |
Position in the list. |
int idmef_user_new_user_id (idmef_user_t *ptr
,idmef_user_id_t **ret
,int pos
);
Create a new idmef_user_id_t children of ptr
, and add it to position pos
of
ptr
list of idmef_user_id_t object. The created idmef_user_id_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_user_t object. |
|
ret |
pointer to an address where to store the created idmef_user_id_t object. |
|
pos |
position in the list. |
idmef_address_category_t
idmef_address_category_to_numeric (const char *name
);
const char *
idmef_address_category_to_string (idmef_address_category_t val
);
Return the IDMEF string equivalent of val
provided idmef_address_category_t value.
int
idmef_address_new (idmef_address_t **ret
);
Create a new idmef_address_t object.
int idmef_address_copy (const idmef_address_t *src
,idmef_address_t *dst
);
Copy a new idmef_address_t object from src
to dst
.
int idmef_address_clone (idmef_address_t *src
,idmef_address_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_address_t *
idmef_address_ref (idmef_address_t *address
);
Increase address
reference count, so that it can be referenced
multiple time.
void
idmef_address_destroy (idmef_address_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
void idmef_address_set_ident (idmef_address_t *ptr
,prelude_string_t *ident
);
Set ident
object as a children of ptr
.
if ptr
already contain an ident
object, then it is destroyed,
and updated to point to the provided ident
object.
int idmef_address_new_ident (idmef_address_t *ptr
,prelude_string_t **ret
);
Create a new ident object, children of idmef_address_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_address_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_address_category_t
idmef_address_get_category (idmef_address_t *ptr
);
Get category children of the idmef_address_t object.
void idmef_address_set_category (idmef_address_t *ptr
,idmef_address_category_t category
);
Set category
object as a children of ptr
.
if ptr
already contain an category
object, then it is destroyed,
and updated to point to the provided category
object.
ptr |
pointer to a idmef_address_t object. |
|
category |
pointer to a idmef_address_category_t object. |
int idmef_address_new_category (idmef_address_t *ptr
,idmef_address_category_t **ret
);
Create a new category object, children of idmef_address_t.
If ptr
already contain a idmef_address_category_t object, then it is destroyed.
ptr |
pointer to a idmef_address_t object. |
|
ret |
pointer to an address where to store the created idmef_address_category_t object. |
prelude_string_t *
idmef_address_get_vlan_name (idmef_address_t *ptr
);
void idmef_address_set_vlan_name (idmef_address_t *ptr
,prelude_string_t *vlan_name
);
Set vlan_name
object as a children of ptr
.
if ptr
already contain an vlan_name
object, then it is destroyed,
and updated to point to the provided vlan_name
object.
int idmef_address_new_vlan_name (idmef_address_t *ptr
,prelude_string_t **ret
);
Create a new vlan_name object, children of idmef_address_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_address_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_address_set_vlan_num (idmef_address_t *ptr
,int32_t vlan_num
);
Set vlan_num
object as a children of ptr
.
if ptr
already contain an vlan_num
object, then it is destroyed,
and updated to point to the provided vlan_num
object.
int idmef_address_new_vlan_num (idmef_address_t *ptr
,int32_t **ret
);
Create a new vlan_num object, children of idmef_address_t.
If ptr
already contain a int32_t object, then it is destroyed.
ptr |
pointer to a idmef_address_t object. |
|
ret |
pointer to an address where to store the created int32_t object. |
void idmef_address_set_address (idmef_address_t *ptr
,prelude_string_t *address
);
Set address
object as a children of ptr
.
if ptr
already contain an address
object, then it is destroyed,
and updated to point to the provided address
object.
int idmef_address_new_address (idmef_address_t *ptr
,prelude_string_t **ret
);
Create a new address object, children of idmef_address_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_address_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_address_set_netmask (idmef_address_t *ptr
,prelude_string_t *netmask
);
Set netmask
object as a children of ptr
.
if ptr
already contain an netmask
object, then it is destroyed,
and updated to point to the provided netmask
object.
int idmef_address_new_netmask (idmef_address_t *ptr
,prelude_string_t **ret
);
Create a new netmask object, children of idmef_address_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_address_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
int
idmef_process_new (idmef_process_t **ret
);
Create a new idmef_process_t object.
int idmef_process_copy (const idmef_process_t *src
,idmef_process_t *dst
);
Copy a new idmef_process_t object from src
to dst
.
int idmef_process_clone (idmef_process_t *src
,idmef_process_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_process_t *
idmef_process_ref (idmef_process_t *process
);
Increase process
reference count, so that it can be referenced
multiple time.
void
idmef_process_destroy (idmef_process_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
void idmef_process_set_ident (idmef_process_t *ptr
,prelude_string_t *ident
);
Set ident
object as a children of ptr
.
if ptr
already contain an ident
object, then it is destroyed,
and updated to point to the provided ident
object.
int idmef_process_new_ident (idmef_process_t *ptr
,prelude_string_t **ret
);
Create a new ident object, children of idmef_process_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_process_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_process_set_name (idmef_process_t *ptr
,prelude_string_t *name
);
Set name
object as a children of ptr
.
if ptr
already contain an name
object, then it is destroyed,
and updated to point to the provided name
object.
int idmef_process_new_name (idmef_process_t *ptr
,prelude_string_t **ret
);
Create a new name object, children of idmef_process_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_process_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_process_set_pid (idmef_process_t *ptr
,uint32_t pid
);
Set pid
object as a children of ptr
.
if ptr
already contain an pid
object, then it is destroyed,
and updated to point to the provided pid
object.
int idmef_process_new_pid (idmef_process_t *ptr
,uint32_t **ret
);
Create a new pid object, children of idmef_process_t.
If ptr
already contain a uint32_t object, then it is destroyed.
ptr |
pointer to a idmef_process_t object. |
|
ret |
pointer to an address where to store the created uint32_t object. |
void idmef_process_set_path (idmef_process_t *ptr
,prelude_string_t *path
);
Set path
object as a children of ptr
.
if ptr
already contain an path
object, then it is destroyed,
and updated to point to the provided path
object.
int idmef_process_new_path (idmef_process_t *ptr
,prelude_string_t **ret
);
Create a new path object, children of idmef_process_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_process_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
prelude_string_t * idmef_process_get_next_arg (idmef_process_t *process
,prelude_string_t *prelude_string_cur
);
Get the next prelude_string_t object listed in ptr
.
When iterating over the prelude_string_t object listed in ptr
,
object
should be set to the latest returned prelude_string_t object.
process |
pointer to a idmef_process_t object. |
|
prelude_string_cur |
pointer to a prelude_string_t object. |
void idmef_process_set_arg (idmef_process_t *ptr
,prelude_string_t *object
,int pos
);
Add object
to position pos
of ptr
list of prelude_string_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_process_t object. |
|
object |
pointer to a prelude_string_t object. |
|
pos |
Position in the list. |
int idmef_process_new_arg (idmef_process_t *ptr
,prelude_string_t **ret
,int pos
);
Create a new prelude_string_t children of ptr
, and add it to position pos
of
ptr
list of prelude_string_t object. The created prelude_string_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_process_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
|
pos |
position in the list. |
prelude_string_t * idmef_process_get_next_env (idmef_process_t *process
,prelude_string_t *prelude_string_cur
);
Get the next prelude_string_t object listed in ptr
.
When iterating over the prelude_string_t object listed in ptr
,
object
should be set to the latest returned prelude_string_t object.
process |
pointer to a idmef_process_t object. |
|
prelude_string_cur |
pointer to a prelude_string_t object. |
void idmef_process_set_env (idmef_process_t *ptr
,prelude_string_t *object
,int pos
);
Add object
to position pos
of ptr
list of prelude_string_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_process_t object. |
|
object |
pointer to a prelude_string_t object. |
|
pos |
Position in the list. |
int idmef_process_new_env (idmef_process_t *ptr
,prelude_string_t **ret
,int pos
);
Create a new prelude_string_t children of ptr
, and add it to position pos
of
ptr
list of prelude_string_t object. The created prelude_string_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_process_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
|
pos |
position in the list. |
int
idmef_web_service_new (idmef_web_service_t **ret
);
Create a new idmef_web_service_t object.
int idmef_web_service_copy (const idmef_web_service_t *src
,idmef_web_service_t *dst
);
Copy a new idmef_web_service_t object from src
to dst
.
int idmef_web_service_clone (idmef_web_service_t *src
,idmef_web_service_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_web_service_t *
idmef_web_service_ref (idmef_web_service_t *web_service
);
Increase web_service
reference count, so that it can be referenced
multiple time.
void
idmef_web_service_destroy (idmef_web_service_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
prelude_string_t *
idmef_web_service_get_url (idmef_web_service_t *ptr
);
void idmef_web_service_set_url (idmef_web_service_t *ptr
,prelude_string_t *url
);
Set url
object as a children of ptr
.
if ptr
already contain an url
object, then it is destroyed,
and updated to point to the provided url
object.
int idmef_web_service_new_url (idmef_web_service_t *ptr
,prelude_string_t **ret
);
Create a new url object, children of idmef_web_service_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_web_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
prelude_string_t *
idmef_web_service_get_cgi (idmef_web_service_t *ptr
);
void idmef_web_service_set_cgi (idmef_web_service_t *ptr
,prelude_string_t *cgi
);
Set cgi
object as a children of ptr
.
if ptr
already contain an cgi
object, then it is destroyed,
and updated to point to the provided cgi
object.
int idmef_web_service_new_cgi (idmef_web_service_t *ptr
,prelude_string_t **ret
);
Create a new cgi object, children of idmef_web_service_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_web_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
prelude_string_t *
idmef_web_service_get_http_method (idmef_web_service_t *ptr
);
void idmef_web_service_set_http_method (idmef_web_service_t *ptr
,prelude_string_t *http_method
);
Set http_method
object as a children of ptr
.
if ptr
already contain an http_method
object, then it is destroyed,
and updated to point to the provided http_method
object.
ptr |
pointer to a idmef_web_service_t object. |
|
http_method |
pointer to a prelude_string_t object. |
int idmef_web_service_new_http_method (idmef_web_service_t *ptr
,prelude_string_t **ret
);
Create a new http_method object, children of idmef_web_service_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_web_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
prelude_string_t * idmef_web_service_get_next_arg (idmef_web_service_t *web_service
,prelude_string_t *prelude_string_cur
);
Get the next prelude_string_t object listed in ptr
.
When iterating over the prelude_string_t object listed in ptr
,
object
should be set to the latest returned prelude_string_t object.
web_service |
pointer to a idmef_web_service_t object. |
|
prelude_string_cur |
pointer to a prelude_string_t object. |
void idmef_web_service_set_arg (idmef_web_service_t *ptr
,prelude_string_t *object
,int pos
);
Add object
to position pos
of ptr
list of prelude_string_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_web_service_t object. |
|
object |
pointer to a prelude_string_t object. |
|
pos |
Position in the list. |
int idmef_web_service_new_arg (idmef_web_service_t *ptr
,prelude_string_t **ret
,int pos
);
Create a new prelude_string_t children of ptr
, and add it to position pos
of
ptr
list of prelude_string_t object. The created prelude_string_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_web_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
|
pos |
position in the list. |
int
idmef_snmp_service_new (idmef_snmp_service_t **ret
);
Create a new idmef_snmp_service_t object.
int idmef_snmp_service_copy (const idmef_snmp_service_t *src
,idmef_snmp_service_t *dst
);
Copy a new idmef_snmp_service_t object from src
to dst
.
int idmef_snmp_service_clone (idmef_snmp_service_t *src
,idmef_snmp_service_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_snmp_service_t *
idmef_snmp_service_ref (idmef_snmp_service_t *snmp_service
);
Increase snmp_service
reference count, so that it can be referenced
multiple time.
void
idmef_snmp_service_destroy (idmef_snmp_service_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
prelude_string_t *
idmef_snmp_service_get_oid (idmef_snmp_service_t *ptr
);
void idmef_snmp_service_set_oid (idmef_snmp_service_t *ptr
,prelude_string_t *oid
);
Set oid
object as a children of ptr
.
if ptr
already contain an oid
object, then it is destroyed,
and updated to point to the provided oid
object.
int idmef_snmp_service_new_oid (idmef_snmp_service_t *ptr
,prelude_string_t **ret
);
Create a new oid object, children of idmef_snmp_service_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_snmp_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void
idmef_snmp_service_unset_message_processing_model
(idmef_snmp_service_t *ptr
);
uint32_t *
idmef_snmp_service_get_message_processing_model
(idmef_snmp_service_t *ptr
);
void idmef_snmp_service_set_message_processing_model (idmef_snmp_service_t *ptr
,uint32_t message_processing_model
);
Set message_processing_model
object as a children of ptr
.
if ptr
already contain an message_processing_model
object, then it is destroyed,
and updated to point to the provided message_processing_model
object.
ptr |
pointer to a idmef_snmp_service_t object. |
|
message_processing_model |
pointer to a uint32_t object. |
int idmef_snmp_service_new_message_processing_model (idmef_snmp_service_t *ptr
,uint32_t **ret
);
Create a new message_processing_model object, children of idmef_snmp_service_t.
If ptr
already contain a uint32_t object, then it is destroyed.
ptr |
pointer to a idmef_snmp_service_t object. |
|
ret |
pointer to an address where to store the created uint32_t object. |
void
idmef_snmp_service_unset_security_model
(idmef_snmp_service_t *ptr
);
uint32_t *
idmef_snmp_service_get_security_model (idmef_snmp_service_t *ptr
);
void idmef_snmp_service_set_security_model (idmef_snmp_service_t *ptr
,uint32_t security_model
);
Set security_model
object as a children of ptr
.
if ptr
already contain an security_model
object, then it is destroyed,
and updated to point to the provided security_model
object.
ptr |
pointer to a idmef_snmp_service_t object. |
|
security_model |
pointer to a uint32_t object. |
int idmef_snmp_service_new_security_model (idmef_snmp_service_t *ptr
,uint32_t **ret
);
Create a new security_model object, children of idmef_snmp_service_t.
If ptr
already contain a uint32_t object, then it is destroyed.
ptr |
pointer to a idmef_snmp_service_t object. |
|
ret |
pointer to an address where to store the created uint32_t object. |
prelude_string_t *
idmef_snmp_service_get_security_name (idmef_snmp_service_t *ptr
);
void idmef_snmp_service_set_security_name (idmef_snmp_service_t *ptr
,prelude_string_t *security_name
);
Set security_name
object as a children of ptr
.
if ptr
already contain an security_name
object, then it is destroyed,
and updated to point to the provided security_name
object.
ptr |
pointer to a idmef_snmp_service_t object. |
|
security_name |
pointer to a prelude_string_t object. |
int idmef_snmp_service_new_security_name (idmef_snmp_service_t *ptr
,prelude_string_t **ret
);
Create a new security_name object, children of idmef_snmp_service_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_snmp_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void
idmef_snmp_service_unset_security_level
(idmef_snmp_service_t *ptr
);
uint32_t *
idmef_snmp_service_get_security_level (idmef_snmp_service_t *ptr
);
void idmef_snmp_service_set_security_level (idmef_snmp_service_t *ptr
,uint32_t security_level
);
Set security_level
object as a children of ptr
.
if ptr
already contain an security_level
object, then it is destroyed,
and updated to point to the provided security_level
object.
ptr |
pointer to a idmef_snmp_service_t object. |
|
security_level |
pointer to a uint32_t object. |
int idmef_snmp_service_new_security_level (idmef_snmp_service_t *ptr
,uint32_t **ret
);
Create a new security_level object, children of idmef_snmp_service_t.
If ptr
already contain a uint32_t object, then it is destroyed.
ptr |
pointer to a idmef_snmp_service_t object. |
|
ret |
pointer to an address where to store the created uint32_t object. |
prelude_string_t *
idmef_snmp_service_get_context_name (idmef_snmp_service_t *ptr
);
void idmef_snmp_service_set_context_name (idmef_snmp_service_t *ptr
,prelude_string_t *context_name
);
Set context_name
object as a children of ptr
.
if ptr
already contain an context_name
object, then it is destroyed,
and updated to point to the provided context_name
object.
ptr |
pointer to a idmef_snmp_service_t object. |
|
context_name |
pointer to a prelude_string_t object. |
int idmef_snmp_service_new_context_name (idmef_snmp_service_t *ptr
,prelude_string_t **ret
);
Create a new context_name object, children of idmef_snmp_service_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_snmp_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
prelude_string_t *
idmef_snmp_service_get_context_engine_id
(idmef_snmp_service_t *ptr
);
void idmef_snmp_service_set_context_engine_id (idmef_snmp_service_t *ptr
,prelude_string_t *context_engine_id
);
Set context_engine_id
object as a children of ptr
.
if ptr
already contain an context_engine_id
object, then it is destroyed,
and updated to point to the provided context_engine_id
object.
ptr |
pointer to a idmef_snmp_service_t object. |
|
context_engine_id |
pointer to a prelude_string_t object. |
int idmef_snmp_service_new_context_engine_id (idmef_snmp_service_t *ptr
,prelude_string_t **ret
);
Create a new context_engine_id object, children of idmef_snmp_service_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_snmp_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
prelude_string_t *
idmef_snmp_service_get_command (idmef_snmp_service_t *ptr
);
void idmef_snmp_service_set_command (idmef_snmp_service_t *ptr
,prelude_string_t *command
);
Set command
object as a children of ptr
.
if ptr
already contain an command
object, then it is destroyed,
and updated to point to the provided command
object.
ptr |
pointer to a idmef_snmp_service_t object. |
|
command |
pointer to a prelude_string_t object. |
int idmef_snmp_service_new_command (idmef_snmp_service_t *ptr
,prelude_string_t **ret
);
Create a new command object, children of idmef_snmp_service_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_snmp_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
prelude_string_t *
idmef_snmp_service_get_community (idmef_snmp_service_t *ptr
);
void idmef_snmp_service_set_community (idmef_snmp_service_t *ptr
,prelude_string_t *community
);
Set community
object as a children of ptr
.
if ptr
already contain an community
object, then it is destroyed,
and updated to point to the provided community
object.
ptr |
pointer to a idmef_snmp_service_t object. |
|
community |
pointer to a prelude_string_t object. |
int idmef_snmp_service_new_community (idmef_snmp_service_t *ptr
,prelude_string_t **ret
);
Create a new community object, children of idmef_snmp_service_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_snmp_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_service_type_t
idmef_service_type_to_numeric (const char *name
);
const char *
idmef_service_type_to_string (idmef_service_type_t val
);
Return the IDMEF string equivalent of val
provided idmef_service_type_t value.
int
idmef_service_new (idmef_service_t **ret
);
Create a new idmef_service_t object.
int idmef_service_copy (const idmef_service_t *src
,idmef_service_t *dst
);
Copy a new idmef_service_t object from src
to dst
.
int idmef_service_clone (idmef_service_t *src
,idmef_service_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_service_t *
idmef_service_ref (idmef_service_t *service
);
Increase service
reference count, so that it can be referenced
multiple time.
void
idmef_service_destroy (idmef_service_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
void idmef_service_set_ident (idmef_service_t *ptr
,prelude_string_t *ident
);
Set ident
object as a children of ptr
.
if ptr
already contain an ident
object, then it is destroyed,
and updated to point to the provided ident
object.
int idmef_service_new_ident (idmef_service_t *ptr
,prelude_string_t **ret
);
Create a new ident object, children of idmef_service_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_service_set_ip_version (idmef_service_t *ptr
,uint8_t ip_version
);
Set ip_version
object as a children of ptr
.
if ptr
already contain an ip_version
object, then it is destroyed,
and updated to point to the provided ip_version
object.
int idmef_service_new_ip_version (idmef_service_t *ptr
,uint8_t **ret
);
Create a new ip_version object, children of idmef_service_t.
If ptr
already contain a uint8_t object, then it is destroyed.
ptr |
pointer to a idmef_service_t object. |
|
ret |
pointer to an address where to store the created uint8_t object. |
void
idmef_service_unset_iana_protocol_number
(idmef_service_t *ptr
);
uint8_t *
idmef_service_get_iana_protocol_number
(idmef_service_t *ptr
);
void idmef_service_set_iana_protocol_number (idmef_service_t *ptr
,uint8_t iana_protocol_number
);
Set iana_protocol_number
object as a children of ptr
.
if ptr
already contain an iana_protocol_number
object, then it is destroyed,
and updated to point to the provided iana_protocol_number
object.
ptr |
pointer to a idmef_service_t object. |
|
iana_protocol_number |
pointer to a uint8_t object. |
int idmef_service_new_iana_protocol_number (idmef_service_t *ptr
,uint8_t **ret
);
Create a new iana_protocol_number object, children of idmef_service_t.
If ptr
already contain a uint8_t object, then it is destroyed.
ptr |
pointer to a idmef_service_t object. |
|
ret |
pointer to an address where to store the created uint8_t object. |
prelude_string_t *
idmef_service_get_iana_protocol_name (idmef_service_t *ptr
);
void idmef_service_set_iana_protocol_name (idmef_service_t *ptr
,prelude_string_t *iana_protocol_name
);
Set iana_protocol_name
object as a children of ptr
.
if ptr
already contain an iana_protocol_name
object, then it is destroyed,
and updated to point to the provided iana_protocol_name
object.
ptr |
pointer to a idmef_service_t object. |
|
iana_protocol_name |
pointer to a prelude_string_t object. |
int idmef_service_new_iana_protocol_name (idmef_service_t *ptr
,prelude_string_t **ret
);
Create a new iana_protocol_name object, children of idmef_service_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_service_set_name (idmef_service_t *ptr
,prelude_string_t *name
);
Set name
object as a children of ptr
.
if ptr
already contain an name
object, then it is destroyed,
and updated to point to the provided name
object.
int idmef_service_new_name (idmef_service_t *ptr
,prelude_string_t **ret
);
Create a new name object, children of idmef_service_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_service_set_port (idmef_service_t *ptr
,uint16_t port
);
Set port
object as a children of ptr
.
if ptr
already contain an port
object, then it is destroyed,
and updated to point to the provided port
object.
int idmef_service_new_port (idmef_service_t *ptr
,uint16_t **ret
);
Create a new port object, children of idmef_service_t.
If ptr
already contain a uint16_t object, then it is destroyed.
ptr |
pointer to a idmef_service_t object. |
|
ret |
pointer to an address where to store the created uint16_t object. |
void idmef_service_set_portlist (idmef_service_t *ptr
,prelude_string_t *portlist
);
Set portlist
object as a children of ptr
.
if ptr
already contain an portlist
object, then it is destroyed,
and updated to point to the provided portlist
object.
int idmef_service_new_portlist (idmef_service_t *ptr
,prelude_string_t **ret
);
Create a new portlist object, children of idmef_service_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_service_set_protocol (idmef_service_t *ptr
,prelude_string_t *protocol
);
Set protocol
object as a children of ptr
.
if ptr
already contain an protocol
object, then it is destroyed,
and updated to point to the provided protocol
object.
int idmef_service_new_protocol (idmef_service_t *ptr
,prelude_string_t **ret
);
Create a new protocol object, children of idmef_service_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_service_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_service_type_t
idmef_service_get_type (idmef_service_t *ptr
);
Access the type children of ptr
.
idmef_web_service_t *
idmef_service_get_web_service (idmef_service_t *ptr
);
Access the web_service children of ptr
.
void idmef_service_set_web_service (idmef_service_t *ptr
,idmef_web_service_t *web_service
);
Set web_service
object as a children of ptr
.
if ptr
already contain a web_service
object, then it is destroyed,
and updated to point to the provided web_service
object.
ptr |
pointer to a idmef_service_t object. |
|
web_service |
pointer to a idmef_web_service_t object. |
int idmef_service_new_web_service (idmef_service_t *ptr
,idmef_web_service_t **ret
);
Create a new idmef_web_service_t object, children of idmef_service_t.
If ptr
already contain a idmef_web_service_t object, then it is destroyed.
ptr |
pointer to a idmef_service_t object. |
|
ret |
pointer where to store the created idmef_web_service_t object. |
idmef_snmp_service_t *
idmef_service_get_snmp_service (idmef_service_t *ptr
);
Access the snmp_service children of ptr
.
void idmef_service_set_snmp_service (idmef_service_t *ptr
,idmef_snmp_service_t *snmp_service
);
Set snmp_service
object as a children of ptr
.
if ptr
already contain a snmp_service
object, then it is destroyed,
and updated to point to the provided snmp_service
object.
ptr |
pointer to a idmef_service_t object. |
|
snmp_service |
pointer to a idmef_snmp_service_t object. |
int idmef_service_new_snmp_service (idmef_service_t *ptr
,idmef_snmp_service_t **ret
);
Create a new idmef_snmp_service_t object, children of idmef_service_t.
If ptr
already contain a idmef_snmp_service_t object, then it is destroyed.
ptr |
pointer to a idmef_service_t object. |
|
ret |
pointer where to store the created idmef_snmp_service_t object. |
idmef_node_category_t
idmef_node_category_to_numeric (const char *name
);
const char *
idmef_node_category_to_string (idmef_node_category_t val
);
Return the IDMEF string equivalent of val
provided idmef_node_category_t value.
int idmef_node_copy (const idmef_node_t *src
,idmef_node_t *dst
);
Copy a new idmef_node_t object from src
to dst
.
int idmef_node_clone (idmef_node_t *src
,idmef_node_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_node_t *
idmef_node_ref (idmef_node_t *node
);
Increase node
reference count, so that it can be referenced
multiple time.
void
idmef_node_destroy (idmef_node_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
void idmef_node_set_ident (idmef_node_t *ptr
,prelude_string_t *ident
);
Set ident
object as a children of ptr
.
if ptr
already contain an ident
object, then it is destroyed,
and updated to point to the provided ident
object.
int idmef_node_new_ident (idmef_node_t *ptr
,prelude_string_t **ret
);
Create a new ident object, children of idmef_node_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_node_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_node_category_t
idmef_node_get_category (idmef_node_t *ptr
);
Get category children of the idmef_node_t object.
void idmef_node_set_category (idmef_node_t *ptr
,idmef_node_category_t category
);
Set category
object as a children of ptr
.
if ptr
already contain an category
object, then it is destroyed,
and updated to point to the provided category
object.
ptr |
pointer to a idmef_node_t object. |
|
category |
pointer to a idmef_node_category_t object. |
int idmef_node_new_category (idmef_node_t *ptr
,idmef_node_category_t **ret
);
Create a new category object, children of idmef_node_t.
If ptr
already contain a idmef_node_category_t object, then it is destroyed.
ptr |
pointer to a idmef_node_t object. |
|
ret |
pointer to an address where to store the created idmef_node_category_t object. |
void idmef_node_set_location (idmef_node_t *ptr
,prelude_string_t *location
);
Set location
object as a children of ptr
.
if ptr
already contain an location
object, then it is destroyed,
and updated to point to the provided location
object.
int idmef_node_new_location (idmef_node_t *ptr
,prelude_string_t **ret
);
Create a new location object, children of idmef_node_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_node_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_node_set_name (idmef_node_t *ptr
,prelude_string_t *name
);
Set name
object as a children of ptr
.
if ptr
already contain an name
object, then it is destroyed,
and updated to point to the provided name
object.
int idmef_node_new_name (idmef_node_t *ptr
,prelude_string_t **ret
);
Create a new name object, children of idmef_node_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_node_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_address_t * idmef_node_get_next_address (idmef_node_t *node
,idmef_address_t *address_cur
);
Get the next idmef_address_t object listed in ptr
.
When iterating over the idmef_address_t object listed in ptr
,
object
should be set to the latest returned idmef_address_t object.
void idmef_node_set_address (idmef_node_t *ptr
,idmef_address_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_address_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_node_t object. |
|
object |
pointer to a idmef_address_t object. |
|
pos |
Position in the list. |
int idmef_node_new_address (idmef_node_t *ptr
,idmef_address_t **ret
,int pos
);
Create a new idmef_address_t children of ptr
, and add it to position pos
of
ptr
list of idmef_address_t object. The created idmef_address_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_node_t object. |
|
ret |
pointer to an address where to store the created idmef_address_t object. |
|
pos |
position in the list. |
idmef_source_spoofed_t
idmef_source_spoofed_to_numeric (const char *name
);
const char *
idmef_source_spoofed_to_string (idmef_source_spoofed_t val
);
Return the IDMEF string equivalent of val
provided idmef_source_spoofed_t value.
int
idmef_source_new (idmef_source_t **ret
);
Create a new idmef_source_t object.
int idmef_source_copy (const idmef_source_t *src
,idmef_source_t *dst
);
Copy a new idmef_source_t object from src
to dst
.
int idmef_source_clone (idmef_source_t *src
,idmef_source_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_source_t *
idmef_source_ref (idmef_source_t *source
);
Increase source
reference count, so that it can be referenced
multiple time.
void
idmef_source_destroy (idmef_source_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
void idmef_source_set_ident (idmef_source_t *ptr
,prelude_string_t *ident
);
Set ident
object as a children of ptr
.
if ptr
already contain an ident
object, then it is destroyed,
and updated to point to the provided ident
object.
int idmef_source_new_ident (idmef_source_t *ptr
,prelude_string_t **ret
);
Create a new ident object, children of idmef_source_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_source_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_source_spoofed_t
idmef_source_get_spoofed (idmef_source_t *ptr
);
Get spoofed children of the idmef_source_t object.
void idmef_source_set_spoofed (idmef_source_t *ptr
,idmef_source_spoofed_t spoofed
);
Set spoofed
object as a children of ptr
.
if ptr
already contain an spoofed
object, then it is destroyed,
and updated to point to the provided spoofed
object.
ptr |
pointer to a idmef_source_t object. |
|
spoofed |
pointer to a idmef_source_spoofed_t object. |
int idmef_source_new_spoofed (idmef_source_t *ptr
,idmef_source_spoofed_t **ret
);
Create a new spoofed object, children of idmef_source_t.
If ptr
already contain a idmef_source_spoofed_t object, then it is destroyed.
ptr |
pointer to a idmef_source_t object. |
|
ret |
pointer to an address where to store the created idmef_source_spoofed_t object. |
void idmef_source_set_interface (idmef_source_t *ptr
,prelude_string_t *interface
);
Set interface
object as a children of ptr
.
if ptr
already contain an interface
object, then it is destroyed,
and updated to point to the provided interface
object.
int idmef_source_new_interface (idmef_source_t *ptr
,prelude_string_t **ret
);
Create a new interface object, children of idmef_source_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_source_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_source_set_node (idmef_source_t *ptr
,idmef_node_t *node
);
Set node
object as a children of ptr
.
if ptr
already contain an node
object, then it is destroyed,
and updated to point to the provided node
object.
int idmef_source_new_node (idmef_source_t *ptr
,idmef_node_t **ret
);
Create a new node object, children of idmef_source_t.
If ptr
already contain a idmef_node_t object, then it is destroyed.
ptr |
pointer to a idmef_source_t object. |
|
ret |
pointer to an address where to store the created idmef_node_t object. |
void idmef_source_set_user (idmef_source_t *ptr
,idmef_user_t *user
);
Set user
object as a children of ptr
.
if ptr
already contain an user
object, then it is destroyed,
and updated to point to the provided user
object.
int idmef_source_new_user (idmef_source_t *ptr
,idmef_user_t **ret
);
Create a new user object, children of idmef_source_t.
If ptr
already contain a idmef_user_t object, then it is destroyed.
ptr |
pointer to a idmef_source_t object. |
|
ret |
pointer to an address where to store the created idmef_user_t object. |
void idmef_source_set_process (idmef_source_t *ptr
,idmef_process_t *process
);
Set process
object as a children of ptr
.
if ptr
already contain an process
object, then it is destroyed,
and updated to point to the provided process
object.
int idmef_source_new_process (idmef_source_t *ptr
,idmef_process_t **ret
);
Create a new process object, children of idmef_source_t.
If ptr
already contain a idmef_process_t object, then it is destroyed.
ptr |
pointer to a idmef_source_t object. |
|
ret |
pointer to an address where to store the created idmef_process_t object. |
void idmef_source_set_service (idmef_source_t *ptr
,idmef_service_t *service
);
Set service
object as a children of ptr
.
if ptr
already contain an service
object, then it is destroyed,
and updated to point to the provided service
object.
int idmef_source_new_service (idmef_source_t *ptr
,idmef_service_t **ret
);
Create a new service object, children of idmef_source_t.
If ptr
already contain a idmef_service_t object, then it is destroyed.
ptr |
pointer to a idmef_source_t object. |
|
ret |
pointer to an address where to store the created idmef_service_t object. |
int
idmef_file_access_new (idmef_file_access_t **ret
);
Create a new idmef_file_access_t object.
int idmef_file_access_copy (const idmef_file_access_t *src
,idmef_file_access_t *dst
);
Copy a new idmef_file_access_t object from src
to dst
.
int idmef_file_access_clone (idmef_file_access_t *src
,idmef_file_access_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_file_access_t *
idmef_file_access_ref (idmef_file_access_t *file_access
);
Increase file_access
reference count, so that it can be referenced
multiple time.
void
idmef_file_access_destroy (idmef_file_access_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
idmef_user_id_t *
idmef_file_access_get_user_id (idmef_file_access_t *ptr
);
void idmef_file_access_set_user_id (idmef_file_access_t *ptr
,idmef_user_id_t *user_id
);
Set user_id
object as a children of ptr
.
if ptr
already contain an user_id
object, then it is destroyed,
and updated to point to the provided user_id
object.
ptr |
pointer to a idmef_file_access_t object. |
|
user_id |
pointer to a idmef_user_id_t object. |
int idmef_file_access_new_user_id (idmef_file_access_t *ptr
,idmef_user_id_t **ret
);
Create a new user_id object, children of idmef_file_access_t.
If ptr
already contain a idmef_user_id_t object, then it is destroyed.
ptr |
pointer to a idmef_file_access_t object. |
|
ret |
pointer to an address where to store the created idmef_user_id_t object. |
prelude_string_t * idmef_file_access_get_next_permission (idmef_file_access_t *file_access
,prelude_string_t *prelude_string_cur
);
Get the next prelude_string_t object listed in ptr
.
When iterating over the prelude_string_t object listed in ptr
,
object
should be set to the latest returned prelude_string_t object.
file_access |
pointer to a idmef_file_access_t object. |
|
prelude_string_cur |
pointer to a prelude_string_t object. |
void idmef_file_access_set_permission (idmef_file_access_t *ptr
,prelude_string_t *object
,int pos
);
Add object
to position pos
of ptr
list of prelude_string_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_file_access_t object. |
|
object |
pointer to a prelude_string_t object. |
|
pos |
Position in the list. |
int idmef_file_access_new_permission (idmef_file_access_t *ptr
,prelude_string_t **ret
,int pos
);
Create a new prelude_string_t children of ptr
, and add it to position pos
of
ptr
list of prelude_string_t object. The created prelude_string_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_file_access_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
|
pos |
position in the list. |
int idmef_inode_copy (const idmef_inode_t *src
,idmef_inode_t *dst
);
Copy a new idmef_inode_t object from src
to dst
.
int idmef_inode_clone (idmef_inode_t *src
,idmef_inode_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_inode_t *
idmef_inode_ref (idmef_inode_t *inode
);
Increase inode
reference count, so that it can be referenced
multiple time.
void
idmef_inode_destroy (idmef_inode_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
void idmef_inode_set_change_time (idmef_inode_t *ptr
,idmef_time_t *change_time
);
Set change_time
object as a children of ptr
.
if ptr
already contain an change_time
object, then it is destroyed,
and updated to point to the provided change_time
object.
int idmef_inode_new_change_time (idmef_inode_t *ptr
,idmef_time_t **ret
);
Create a new change_time object, children of idmef_inode_t.
If ptr
already contain a idmef_time_t object, then it is destroyed.
ptr |
pointer to a idmef_inode_t object. |
|
ret |
pointer to an address where to store the created idmef_time_t object. |
void idmef_inode_set_number (idmef_inode_t *ptr
,uint32_t number
);
Set number
object as a children of ptr
.
if ptr
already contain an number
object, then it is destroyed,
and updated to point to the provided number
object.
int idmef_inode_new_number (idmef_inode_t *ptr
,uint32_t **ret
);
Create a new number object, children of idmef_inode_t.
If ptr
already contain a uint32_t object, then it is destroyed.
ptr |
pointer to a idmef_inode_t object. |
|
ret |
pointer to an address where to store the created uint32_t object. |
void idmef_inode_set_major_device (idmef_inode_t *ptr
,uint32_t major_device
);
Set major_device
object as a children of ptr
.
if ptr
already contain an major_device
object, then it is destroyed,
and updated to point to the provided major_device
object.
int idmef_inode_new_major_device (idmef_inode_t *ptr
,uint32_t **ret
);
Create a new major_device object, children of idmef_inode_t.
If ptr
already contain a uint32_t object, then it is destroyed.
ptr |
pointer to a idmef_inode_t object. |
|
ret |
pointer to an address where to store the created uint32_t object. |
void idmef_inode_set_minor_device (idmef_inode_t *ptr
,uint32_t minor_device
);
Set minor_device
object as a children of ptr
.
if ptr
already contain an minor_device
object, then it is destroyed,
and updated to point to the provided minor_device
object.
int idmef_inode_new_minor_device (idmef_inode_t *ptr
,uint32_t **ret
);
Create a new minor_device object, children of idmef_inode_t.
If ptr
already contain a uint32_t object, then it is destroyed.
ptr |
pointer to a idmef_inode_t object. |
|
ret |
pointer to an address where to store the created uint32_t object. |
void idmef_inode_set_c_major_device (idmef_inode_t *ptr
,uint32_t c_major_device
);
Set c_major_device
object as a children of ptr
.
if ptr
already contain an c_major_device
object, then it is destroyed,
and updated to point to the provided c_major_device
object.
int idmef_inode_new_c_major_device (idmef_inode_t *ptr
,uint32_t **ret
);
Create a new c_major_device object, children of idmef_inode_t.
If ptr
already contain a uint32_t object, then it is destroyed.
ptr |
pointer to a idmef_inode_t object. |
|
ret |
pointer to an address where to store the created uint32_t object. |
void idmef_inode_set_c_minor_device (idmef_inode_t *ptr
,uint32_t c_minor_device
);
Set c_minor_device
object as a children of ptr
.
if ptr
already contain an c_minor_device
object, then it is destroyed,
and updated to point to the provided c_minor_device
object.
int idmef_inode_new_c_minor_device (idmef_inode_t *ptr
,uint32_t **ret
);
Create a new c_minor_device object, children of idmef_inode_t.
If ptr
already contain a uint32_t object, then it is destroyed.
ptr |
pointer to a idmef_inode_t object. |
|
ret |
pointer to an address where to store the created uint32_t object. |
idmef_checksum_algorithm_t
idmef_checksum_algorithm_to_numeric (const char *name
);
const char *
idmef_checksum_algorithm_to_string (idmef_checksum_algorithm_t val
);
Return the IDMEF string equivalent of val
provided idmef_checksum_algorithm_t value.
int
idmef_checksum_new (idmef_checksum_t **ret
);
Create a new idmef_checksum_t object.
int idmef_checksum_copy (const idmef_checksum_t *src
,idmef_checksum_t *dst
);
Copy a new idmef_checksum_t object from src
to dst
.
int idmef_checksum_clone (idmef_checksum_t *src
,idmef_checksum_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_checksum_t *
idmef_checksum_ref (idmef_checksum_t *checksum
);
Increase checksum
reference count, so that it can be referenced
multiple time.
void
idmef_checksum_destroy (idmef_checksum_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
void idmef_checksum_set_value (idmef_checksum_t *ptr
,prelude_string_t *value
);
Set value
object as a children of ptr
.
if ptr
already contain an value
object, then it is destroyed,
and updated to point to the provided value
object.
int idmef_checksum_new_value (idmef_checksum_t *ptr
,prelude_string_t **ret
);
Create a new value object, children of idmef_checksum_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_checksum_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_checksum_set_key (idmef_checksum_t *ptr
,prelude_string_t *key
);
Set key
object as a children of ptr
.
if ptr
already contain an key
object, then it is destroyed,
and updated to point to the provided key
object.
int idmef_checksum_new_key (idmef_checksum_t *ptr
,prelude_string_t **ret
);
Create a new key object, children of idmef_checksum_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_checksum_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_checksum_algorithm_t
idmef_checksum_get_algorithm (idmef_checksum_t *ptr
);
Get algorithm children of the idmef_checksum_t object.
void idmef_checksum_set_algorithm (idmef_checksum_t *ptr
,idmef_checksum_algorithm_t algorithm
);
Set algorithm
object as a children of ptr
.
if ptr
already contain an algorithm
object, then it is destroyed,
and updated to point to the provided algorithm
object.
ptr |
pointer to a idmef_checksum_t object. |
|
algorithm |
pointer to a idmef_checksum_algorithm_t object. |
int idmef_checksum_new_algorithm (idmef_checksum_t *ptr
,idmef_checksum_algorithm_t **ret
);
Create a new algorithm object, children of idmef_checksum_t.
If ptr
already contain a idmef_checksum_algorithm_t object, then it is destroyed.
ptr |
pointer to a idmef_checksum_t object. |
|
ret |
pointer to an address where to store the created idmef_checksum_algorithm_t object. |
idmef_file_category_t
idmef_file_category_to_numeric (const char *name
);
const char *
idmef_file_category_to_string (idmef_file_category_t val
);
Return the IDMEF string equivalent of val
provided idmef_file_category_t value.
idmef_file_fstype_t
idmef_file_fstype_to_numeric (const char *name
);
const char *
idmef_file_fstype_to_string (idmef_file_fstype_t val
);
Return the IDMEF string equivalent of val
provided idmef_file_fstype_t value.
int idmef_file_copy (const idmef_file_t *src
,idmef_file_t *dst
);
Copy a new idmef_file_t object from src
to dst
.
int idmef_file_clone (idmef_file_t *src
,idmef_file_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_file_t *
idmef_file_ref (idmef_file_t *file
);
Increase file
reference count, so that it can be referenced
multiple time.
void
idmef_file_destroy (idmef_file_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
void idmef_file_set_ident (idmef_file_t *ptr
,prelude_string_t *ident
);
Set ident
object as a children of ptr
.
if ptr
already contain an ident
object, then it is destroyed,
and updated to point to the provided ident
object.
int idmef_file_new_ident (idmef_file_t *ptr
,prelude_string_t **ret
);
Create a new ident object, children of idmef_file_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_file_set_name (idmef_file_t *ptr
,prelude_string_t *name
);
Set name
object as a children of ptr
.
if ptr
already contain an name
object, then it is destroyed,
and updated to point to the provided name
object.
int idmef_file_new_name (idmef_file_t *ptr
,prelude_string_t **ret
);
Create a new name object, children of idmef_file_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_file_set_path (idmef_file_t *ptr
,prelude_string_t *path
);
Set path
object as a children of ptr
.
if ptr
already contain an path
object, then it is destroyed,
and updated to point to the provided path
object.
int idmef_file_new_path (idmef_file_t *ptr
,prelude_string_t **ret
);
Create a new path object, children of idmef_file_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_file_set_create_time (idmef_file_t *ptr
,idmef_time_t *create_time
);
Set create_time
object as a children of ptr
.
if ptr
already contain an create_time
object, then it is destroyed,
and updated to point to the provided create_time
object.
int idmef_file_new_create_time (idmef_file_t *ptr
,idmef_time_t **ret
);
Create a new create_time object, children of idmef_file_t.
If ptr
already contain a idmef_time_t object, then it is destroyed.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created idmef_time_t object. |
void idmef_file_set_modify_time (idmef_file_t *ptr
,idmef_time_t *modify_time
);
Set modify_time
object as a children of ptr
.
if ptr
already contain an modify_time
object, then it is destroyed,
and updated to point to the provided modify_time
object.
int idmef_file_new_modify_time (idmef_file_t *ptr
,idmef_time_t **ret
);
Create a new modify_time object, children of idmef_file_t.
If ptr
already contain a idmef_time_t object, then it is destroyed.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created idmef_time_t object. |
void idmef_file_set_access_time (idmef_file_t *ptr
,idmef_time_t *access_time
);
Set access_time
object as a children of ptr
.
if ptr
already contain an access_time
object, then it is destroyed,
and updated to point to the provided access_time
object.
int idmef_file_new_access_time (idmef_file_t *ptr
,idmef_time_t **ret
);
Create a new access_time object, children of idmef_file_t.
If ptr
already contain a idmef_time_t object, then it is destroyed.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created idmef_time_t object. |
void idmef_file_set_data_size (idmef_file_t *ptr
,uint64_t data_size
);
Set data_size
object as a children of ptr
.
if ptr
already contain an data_size
object, then it is destroyed,
and updated to point to the provided data_size
object.
int idmef_file_new_data_size (idmef_file_t *ptr
,uint64_t **ret
);
Create a new data_size object, children of idmef_file_t.
If ptr
already contain a uint64_t object, then it is destroyed.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created uint64_t object. |
void idmef_file_set_disk_size (idmef_file_t *ptr
,uint64_t disk_size
);
Set disk_size
object as a children of ptr
.
if ptr
already contain an disk_size
object, then it is destroyed,
and updated to point to the provided disk_size
object.
int idmef_file_new_disk_size (idmef_file_t *ptr
,uint64_t **ret
);
Create a new disk_size object, children of idmef_file_t.
If ptr
already contain a uint64_t object, then it is destroyed.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created uint64_t object. |
idmef_file_access_t * idmef_file_get_next_file_access (idmef_file_t *file
,idmef_file_access_t *file_access_cur
);
Get the next idmef_file_access_t object listed in ptr
.
When iterating over the idmef_file_access_t object listed in ptr
,
object
should be set to the latest returned idmef_file_access_t object.
file |
pointer to a idmef_file_t object. |
|
file_access_cur |
pointer to a idmef_file_access_t object. |
void idmef_file_set_file_access (idmef_file_t *ptr
,idmef_file_access_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_file_access_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_file_t object. |
|
object |
pointer to a idmef_file_access_t object. |
|
pos |
Position in the list. |
int idmef_file_new_file_access (idmef_file_t *ptr
,idmef_file_access_t **ret
,int pos
);
Create a new idmef_file_access_t children of ptr
, and add it to position pos
of
ptr
list of idmef_file_access_t object. The created idmef_file_access_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created idmef_file_access_t object. |
|
pos |
position in the list. |
idmef_linkage_t * idmef_file_get_next_linkage (idmef_file_t *file
,idmef_linkage_t *linkage_cur
);
Get the next idmef_linkage_t object listed in ptr
.
When iterating over the idmef_linkage_t object listed in ptr
,
object
should be set to the latest returned idmef_linkage_t object.
void idmef_file_set_linkage (idmef_file_t *ptr
,idmef_linkage_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_linkage_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_file_t object. |
|
object |
pointer to a idmef_linkage_t object. |
|
pos |
Position in the list. |
int idmef_file_new_linkage (idmef_file_t *ptr
,idmef_linkage_t **ret
,int pos
);
Create a new idmef_linkage_t children of ptr
, and add it to position pos
of
ptr
list of idmef_linkage_t object. The created idmef_linkage_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created idmef_linkage_t object. |
|
pos |
position in the list. |
void idmef_file_set_inode (idmef_file_t *ptr
,idmef_inode_t *inode
);
Set inode
object as a children of ptr
.
if ptr
already contain an inode
object, then it is destroyed,
and updated to point to the provided inode
object.
int idmef_file_new_inode (idmef_file_t *ptr
,idmef_inode_t **ret
);
Create a new inode object, children of idmef_file_t.
If ptr
already contain a idmef_inode_t object, then it is destroyed.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created idmef_inode_t object. |
idmef_checksum_t * idmef_file_get_next_checksum (idmef_file_t *file
,idmef_checksum_t *checksum_cur
);
Get the next idmef_checksum_t object listed in ptr
.
When iterating over the idmef_checksum_t object listed in ptr
,
object
should be set to the latest returned idmef_checksum_t object.
file |
pointer to a idmef_file_t object. |
|
checksum_cur |
pointer to a idmef_checksum_t object. |
void idmef_file_set_checksum (idmef_file_t *ptr
,idmef_checksum_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_checksum_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_file_t object. |
|
object |
pointer to a idmef_checksum_t object. |
|
pos |
Position in the list. |
int idmef_file_new_checksum (idmef_file_t *ptr
,idmef_checksum_t **ret
,int pos
);
Create a new idmef_checksum_t children of ptr
, and add it to position pos
of
ptr
list of idmef_checksum_t object. The created idmef_checksum_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created idmef_checksum_t object. |
|
pos |
position in the list. |
idmef_file_category_t
idmef_file_get_category (idmef_file_t *ptr
);
Get category children of the idmef_file_t object.
void idmef_file_set_category (idmef_file_t *ptr
,idmef_file_category_t category
);
Set category
object as a children of ptr
.
if ptr
already contain an category
object, then it is destroyed,
and updated to point to the provided category
object.
ptr |
pointer to a idmef_file_t object. |
|
category |
pointer to a idmef_file_category_t object. |
int idmef_file_new_category (idmef_file_t *ptr
,idmef_file_category_t **ret
);
Create a new category object, children of idmef_file_t.
If ptr
already contain a idmef_file_category_t object, then it is destroyed.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created idmef_file_category_t object. |
void idmef_file_set_fstype (idmef_file_t *ptr
,idmef_file_fstype_t fstype
);
Set fstype
object as a children of ptr
.
if ptr
already contain an fstype
object, then it is destroyed,
and updated to point to the provided fstype
object.
int idmef_file_new_fstype (idmef_file_t *ptr
,idmef_file_fstype_t **ret
);
Create a new fstype object, children of idmef_file_t.
If ptr
already contain a idmef_file_fstype_t object, then it is destroyed.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created idmef_file_fstype_t object. |
void idmef_file_set_file_type (idmef_file_t *ptr
,prelude_string_t *file_type
);
Set file_type
object as a children of ptr
.
if ptr
already contain an file_type
object, then it is destroyed,
and updated to point to the provided file_type
object.
int idmef_file_new_file_type (idmef_file_t *ptr
,prelude_string_t **ret
);
Create a new file_type object, children of idmef_file_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_file_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_linkage_category_t
idmef_linkage_category_to_numeric (const char *name
);
const char *
idmef_linkage_category_to_string (idmef_linkage_category_t val
);
Return the IDMEF string equivalent of val
provided idmef_linkage_category_t value.
int
idmef_linkage_new (idmef_linkage_t **ret
);
Create a new idmef_linkage_t object.
int idmef_linkage_copy (const idmef_linkage_t *src
,idmef_linkage_t *dst
);
Copy a new idmef_linkage_t object from src
to dst
.
int idmef_linkage_clone (idmef_linkage_t *src
,idmef_linkage_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_linkage_t *
idmef_linkage_ref (idmef_linkage_t *linkage
);
Increase linkage
reference count, so that it can be referenced
multiple time.
void
idmef_linkage_destroy (idmef_linkage_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
idmef_linkage_category_t
idmef_linkage_get_category (idmef_linkage_t *ptr
);
Get category children of the idmef_linkage_t object.
void idmef_linkage_set_category (idmef_linkage_t *ptr
,idmef_linkage_category_t category
);
Set category
object as a children of ptr
.
if ptr
already contain an category
object, then it is destroyed,
and updated to point to the provided category
object.
ptr |
pointer to a idmef_linkage_t object. |
|
category |
pointer to a idmef_linkage_category_t object. |
int idmef_linkage_new_category (idmef_linkage_t *ptr
,idmef_linkage_category_t **ret
);
Create a new category object, children of idmef_linkage_t.
If ptr
already contain a idmef_linkage_category_t object, then it is destroyed.
ptr |
pointer to a idmef_linkage_t object. |
|
ret |
pointer to an address where to store the created idmef_linkage_category_t object. |
void idmef_linkage_set_name (idmef_linkage_t *ptr
,prelude_string_t *name
);
Set name
object as a children of ptr
.
if ptr
already contain an name
object, then it is destroyed,
and updated to point to the provided name
object.
int idmef_linkage_new_name (idmef_linkage_t *ptr
,prelude_string_t **ret
);
Create a new name object, children of idmef_linkage_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_linkage_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_linkage_set_path (idmef_linkage_t *ptr
,prelude_string_t *path
);
Set path
object as a children of ptr
.
if ptr
already contain an path
object, then it is destroyed,
and updated to point to the provided path
object.
int idmef_linkage_new_path (idmef_linkage_t *ptr
,prelude_string_t **ret
);
Create a new path object, children of idmef_linkage_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_linkage_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_linkage_set_file (idmef_linkage_t *ptr
,idmef_file_t *file
);
Set file
object as a children of ptr
.
if ptr
already contain an file
object, then it is destroyed,
and updated to point to the provided file
object.
int idmef_linkage_new_file (idmef_linkage_t *ptr
,idmef_file_t **ret
);
Create a new file object, children of idmef_linkage_t.
If ptr
already contain a idmef_file_t object, then it is destroyed.
ptr |
pointer to a idmef_linkage_t object. |
|
ret |
pointer to an address where to store the created idmef_file_t object. |
idmef_target_decoy_t
idmef_target_decoy_to_numeric (const char *name
);
const char *
idmef_target_decoy_to_string (idmef_target_decoy_t val
);
Return the IDMEF string equivalent of val
provided idmef_target_decoy_t value.
int
idmef_target_new (idmef_target_t **ret
);
Create a new idmef_target_t object.
int idmef_target_copy (const idmef_target_t *src
,idmef_target_t *dst
);
Copy a new idmef_target_t object from src
to dst
.
int idmef_target_clone (idmef_target_t *src
,idmef_target_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_target_t *
idmef_target_ref (idmef_target_t *target
);
Increase target
reference count, so that it can be referenced
multiple time.
void
idmef_target_destroy (idmef_target_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
void idmef_target_set_ident (idmef_target_t *ptr
,prelude_string_t *ident
);
Set ident
object as a children of ptr
.
if ptr
already contain an ident
object, then it is destroyed,
and updated to point to the provided ident
object.
int idmef_target_new_ident (idmef_target_t *ptr
,prelude_string_t **ret
);
Create a new ident object, children of idmef_target_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_target_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_target_decoy_t
idmef_target_get_decoy (idmef_target_t *ptr
);
Get decoy children of the idmef_target_t object.
void idmef_target_set_decoy (idmef_target_t *ptr
,idmef_target_decoy_t decoy
);
Set decoy
object as a children of ptr
.
if ptr
already contain an decoy
object, then it is destroyed,
and updated to point to the provided decoy
object.
int idmef_target_new_decoy (idmef_target_t *ptr
,idmef_target_decoy_t **ret
);
Create a new decoy object, children of idmef_target_t.
If ptr
already contain a idmef_target_decoy_t object, then it is destroyed.
ptr |
pointer to a idmef_target_t object. |
|
ret |
pointer to an address where to store the created idmef_target_decoy_t object. |
void idmef_target_set_interface (idmef_target_t *ptr
,prelude_string_t *interface
);
Set interface
object as a children of ptr
.
if ptr
already contain an interface
object, then it is destroyed,
and updated to point to the provided interface
object.
int idmef_target_new_interface (idmef_target_t *ptr
,prelude_string_t **ret
);
Create a new interface object, children of idmef_target_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_target_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_target_set_node (idmef_target_t *ptr
,idmef_node_t *node
);
Set node
object as a children of ptr
.
if ptr
already contain an node
object, then it is destroyed,
and updated to point to the provided node
object.
int idmef_target_new_node (idmef_target_t *ptr
,idmef_node_t **ret
);
Create a new node object, children of idmef_target_t.
If ptr
already contain a idmef_node_t object, then it is destroyed.
ptr |
pointer to a idmef_target_t object. |
|
ret |
pointer to an address where to store the created idmef_node_t object. |
void idmef_target_set_user (idmef_target_t *ptr
,idmef_user_t *user
);
Set user
object as a children of ptr
.
if ptr
already contain an user
object, then it is destroyed,
and updated to point to the provided user
object.
int idmef_target_new_user (idmef_target_t *ptr
,idmef_user_t **ret
);
Create a new user object, children of idmef_target_t.
If ptr
already contain a idmef_user_t object, then it is destroyed.
ptr |
pointer to a idmef_target_t object. |
|
ret |
pointer to an address where to store the created idmef_user_t object. |
void idmef_target_set_process (idmef_target_t *ptr
,idmef_process_t *process
);
Set process
object as a children of ptr
.
if ptr
already contain an process
object, then it is destroyed,
and updated to point to the provided process
object.
int idmef_target_new_process (idmef_target_t *ptr
,idmef_process_t **ret
);
Create a new process object, children of idmef_target_t.
If ptr
already contain a idmef_process_t object, then it is destroyed.
ptr |
pointer to a idmef_target_t object. |
|
ret |
pointer to an address where to store the created idmef_process_t object. |
void idmef_target_set_service (idmef_target_t *ptr
,idmef_service_t *service
);
Set service
object as a children of ptr
.
if ptr
already contain an service
object, then it is destroyed,
and updated to point to the provided service
object.
int idmef_target_new_service (idmef_target_t *ptr
,idmef_service_t **ret
);
Create a new service object, children of idmef_target_t.
If ptr
already contain a idmef_service_t object, then it is destroyed.
ptr |
pointer to a idmef_target_t object. |
|
ret |
pointer to an address where to store the created idmef_service_t object. |
idmef_file_t * idmef_target_get_next_file (idmef_target_t *target
,idmef_file_t *file_cur
);
Get the next idmef_file_t object listed in ptr
.
When iterating over the idmef_file_t object listed in ptr
,
object
should be set to the latest returned idmef_file_t object.
void idmef_target_set_file (idmef_target_t *ptr
,idmef_file_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_file_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_target_t object. |
|
object |
pointer to a idmef_file_t object. |
|
pos |
Position in the list. |
int idmef_target_new_file (idmef_target_t *ptr
,idmef_file_t **ret
,int pos
);
Create a new idmef_file_t children of ptr
, and add it to position pos
of
ptr
list of idmef_file_t object. The created idmef_file_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_target_t object. |
|
ret |
pointer to an address where to store the created idmef_file_t object. |
|
pos |
position in the list. |
int
idmef_analyzer_new (idmef_analyzer_t **ret
);
Create a new idmef_analyzer_t object.
int idmef_analyzer_copy (const idmef_analyzer_t *src
,idmef_analyzer_t *dst
);
Copy a new idmef_analyzer_t object from src
to dst
.
int idmef_analyzer_clone (idmef_analyzer_t *src
,idmef_analyzer_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_analyzer_t *
idmef_analyzer_ref (idmef_analyzer_t *analyzer
);
Increase analyzer
reference count, so that it can be referenced
multiple time.
void
idmef_analyzer_destroy (idmef_analyzer_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
prelude_string_t *
idmef_analyzer_get_analyzerid (idmef_analyzer_t *ptr
);
void idmef_analyzer_set_analyzerid (idmef_analyzer_t *ptr
,prelude_string_t *analyzerid
);
Set analyzerid
object as a children of ptr
.
if ptr
already contain an analyzerid
object, then it is destroyed,
and updated to point to the provided analyzerid
object.
ptr |
pointer to a idmef_analyzer_t object. |
|
analyzerid |
pointer to a prelude_string_t object. |
int idmef_analyzer_new_analyzerid (idmef_analyzer_t *ptr
,prelude_string_t **ret
);
Create a new analyzerid object, children of idmef_analyzer_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_analyzer_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_analyzer_set_name (idmef_analyzer_t *ptr
,prelude_string_t *name
);
Set name
object as a children of ptr
.
if ptr
already contain an name
object, then it is destroyed,
and updated to point to the provided name
object.
int idmef_analyzer_new_name (idmef_analyzer_t *ptr
,prelude_string_t **ret
);
Create a new name object, children of idmef_analyzer_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_analyzer_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
prelude_string_t *
idmef_analyzer_get_manufacturer (idmef_analyzer_t *ptr
);
void idmef_analyzer_set_manufacturer (idmef_analyzer_t *ptr
,prelude_string_t *manufacturer
);
Set manufacturer
object as a children of ptr
.
if ptr
already contain an manufacturer
object, then it is destroyed,
and updated to point to the provided manufacturer
object.
ptr |
pointer to a idmef_analyzer_t object. |
|
manufacturer |
pointer to a prelude_string_t object. |
int idmef_analyzer_new_manufacturer (idmef_analyzer_t *ptr
,prelude_string_t **ret
);
Create a new manufacturer object, children of idmef_analyzer_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_analyzer_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_analyzer_set_model (idmef_analyzer_t *ptr
,prelude_string_t *model
);
Set model
object as a children of ptr
.
if ptr
already contain an model
object, then it is destroyed,
and updated to point to the provided model
object.
int idmef_analyzer_new_model (idmef_analyzer_t *ptr
,prelude_string_t **ret
);
Create a new model object, children of idmef_analyzer_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_analyzer_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
prelude_string_t *
idmef_analyzer_get_version (idmef_analyzer_t *ptr
);
void idmef_analyzer_set_version (idmef_analyzer_t *ptr
,prelude_string_t *version
);
Set version
object as a children of ptr
.
if ptr
already contain an version
object, then it is destroyed,
and updated to point to the provided version
object.
int idmef_analyzer_new_version (idmef_analyzer_t *ptr
,prelude_string_t **ret
);
Create a new version object, children of idmef_analyzer_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_analyzer_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_analyzer_set_class (idmef_analyzer_t *ptr
,prelude_string_t *class_str
);
Set class_str
object as a children of ptr
.
if ptr
already contain an class_str
object, then it is destroyed,
and updated to point to the provided class_str
object.
ptr |
pointer to a idmef_analyzer_t object. |
|
class_str |
pointer to a prelude_string_t object. |
int idmef_analyzer_new_class (idmef_analyzer_t *ptr
,prelude_string_t **ret
);
Create a new class object, children of idmef_analyzer_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_analyzer_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_analyzer_set_ostype (idmef_analyzer_t *ptr
,prelude_string_t *ostype
);
Set ostype
object as a children of ptr
.
if ptr
already contain an ostype
object, then it is destroyed,
and updated to point to the provided ostype
object.
int idmef_analyzer_new_ostype (idmef_analyzer_t *ptr
,prelude_string_t **ret
);
Create a new ostype object, children of idmef_analyzer_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_analyzer_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
prelude_string_t *
idmef_analyzer_get_osversion (idmef_analyzer_t *ptr
);
void idmef_analyzer_set_osversion (idmef_analyzer_t *ptr
,prelude_string_t *osversion
);
Set osversion
object as a children of ptr
.
if ptr
already contain an osversion
object, then it is destroyed,
and updated to point to the provided osversion
object.
ptr |
pointer to a idmef_analyzer_t object. |
|
osversion |
pointer to a prelude_string_t object. |
int idmef_analyzer_new_osversion (idmef_analyzer_t *ptr
,prelude_string_t **ret
);
Create a new osversion object, children of idmef_analyzer_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_analyzer_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void idmef_analyzer_set_node (idmef_analyzer_t *ptr
,idmef_node_t *node
);
Set node
object as a children of ptr
.
if ptr
already contain an node
object, then it is destroyed,
and updated to point to the provided node
object.
int idmef_analyzer_new_node (idmef_analyzer_t *ptr
,idmef_node_t **ret
);
Create a new node object, children of idmef_analyzer_t.
If ptr
already contain a idmef_node_t object, then it is destroyed.
ptr |
pointer to a idmef_analyzer_t object. |
|
ret |
pointer to an address where to store the created idmef_node_t object. |
void idmef_analyzer_set_process (idmef_analyzer_t *ptr
,idmef_process_t *process
);
Set process
object as a children of ptr
.
if ptr
already contain an process
object, then it is destroyed,
and updated to point to the provided process
object.
int idmef_analyzer_new_process (idmef_analyzer_t *ptr
,idmef_process_t **ret
);
Create a new process object, children of idmef_analyzer_t.
If ptr
already contain a idmef_process_t object, then it is destroyed.
ptr |
pointer to a idmef_analyzer_t object. |
|
ret |
pointer to an address where to store the created idmef_process_t object. |
int
idmef_alertident_new (idmef_alertident_t **ret
);
Create a new idmef_alertident_t object.
int idmef_alertident_copy (const idmef_alertident_t *src
,idmef_alertident_t *dst
);
Copy a new idmef_alertident_t object from src
to dst
.
int idmef_alertident_clone (idmef_alertident_t *src
,idmef_alertident_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_alertident_t *
idmef_alertident_ref (idmef_alertident_t *alertident
);
Increase alertident
reference count, so that it can be referenced
multiple time.
void
idmef_alertident_destroy (idmef_alertident_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
prelude_string_t *
idmef_alertident_get_alertident (idmef_alertident_t *ptr
);
void idmef_alertident_set_alertident (idmef_alertident_t *ptr
,prelude_string_t *alertident
);
Set alertident
object as a children of ptr
.
if ptr
already contain an alertident
object, then it is destroyed,
and updated to point to the provided alertident
object.
ptr |
pointer to a idmef_alertident_t object. |
|
alertident |
pointer to a prelude_string_t object. |
int idmef_alertident_new_alertident (idmef_alertident_t *ptr
,prelude_string_t **ret
);
Create a new alertident object, children of idmef_alertident_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_alertident_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
prelude_string_t *
idmef_alertident_get_analyzerid (idmef_alertident_t *ptr
);
void idmef_alertident_set_analyzerid (idmef_alertident_t *ptr
,prelude_string_t *analyzerid
);
Set analyzerid
object as a children of ptr
.
if ptr
already contain an analyzerid
object, then it is destroyed,
and updated to point to the provided analyzerid
object.
ptr |
pointer to a idmef_alertident_t object. |
|
analyzerid |
pointer to a prelude_string_t object. |
int idmef_alertident_new_analyzerid (idmef_alertident_t *ptr
,prelude_string_t **ret
);
Create a new analyzerid object, children of idmef_alertident_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_alertident_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_impact_severity_t
idmef_impact_severity_to_numeric (const char *name
);
const char *
idmef_impact_severity_to_string (idmef_impact_severity_t val
);
Return the IDMEF string equivalent of val
provided idmef_impact_severity_t value.
idmef_impact_completion_t
idmef_impact_completion_to_numeric (const char *name
);
const char *
idmef_impact_completion_to_string (idmef_impact_completion_t val
);
Return the IDMEF string equivalent of val
provided idmef_impact_completion_t value.
idmef_impact_type_t
idmef_impact_type_to_numeric (const char *name
);
const char *
idmef_impact_type_to_string (idmef_impact_type_t val
);
Return the IDMEF string equivalent of val
provided idmef_impact_type_t value.
int
idmef_impact_new (idmef_impact_t **ret
);
Create a new idmef_impact_t object.
int idmef_impact_copy (const idmef_impact_t *src
,idmef_impact_t *dst
);
Copy a new idmef_impact_t object from src
to dst
.
int idmef_impact_clone (idmef_impact_t *src
,idmef_impact_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_impact_t *
idmef_impact_ref (idmef_impact_t *impact
);
Increase impact
reference count, so that it can be referenced
multiple time.
void
idmef_impact_destroy (idmef_impact_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
idmef_impact_severity_t *
idmef_impact_get_severity (idmef_impact_t *ptr
);
void idmef_impact_set_severity (idmef_impact_t *ptr
,idmef_impact_severity_t severity
);
Set severity
object as a children of ptr
.
if ptr
already contain an severity
object, then it is destroyed,
and updated to point to the provided severity
object.
ptr |
pointer to a idmef_impact_t object. |
|
severity |
pointer to a idmef_impact_severity_t object. |
int idmef_impact_new_severity (idmef_impact_t *ptr
,idmef_impact_severity_t **ret
);
Create a new severity object, children of idmef_impact_t.
If ptr
already contain a idmef_impact_severity_t object, then it is destroyed.
ptr |
pointer to a idmef_impact_t object. |
|
ret |
pointer to an address where to store the created idmef_impact_severity_t object. |
idmef_impact_completion_t *
idmef_impact_get_completion (idmef_impact_t *ptr
);
void idmef_impact_set_completion (idmef_impact_t *ptr
,idmef_impact_completion_t completion
);
Set completion
object as a children of ptr
.
if ptr
already contain an completion
object, then it is destroyed,
and updated to point to the provided completion
object.
ptr |
pointer to a idmef_impact_t object. |
|
completion |
pointer to a idmef_impact_completion_t object. |
int idmef_impact_new_completion (idmef_impact_t *ptr
,idmef_impact_completion_t **ret
);
Create a new completion object, children of idmef_impact_t.
If ptr
already contain a idmef_impact_completion_t object, then it is destroyed.
ptr |
pointer to a idmef_impact_t object. |
|
ret |
pointer to an address where to store the created idmef_impact_completion_t object. |
idmef_impact_type_t
idmef_impact_get_type (idmef_impact_t *ptr
);
Get type children of the idmef_impact_t object.
void idmef_impact_set_type (idmef_impact_t *ptr
,idmef_impact_type_t type
);
Set type
object as a children of ptr
.
if ptr
already contain an type
object, then it is destroyed,
and updated to point to the provided type
object.
int idmef_impact_new_type (idmef_impact_t *ptr
,idmef_impact_type_t **ret
);
Create a new type object, children of idmef_impact_t.
If ptr
already contain a idmef_impact_type_t object, then it is destroyed.
ptr |
pointer to a idmef_impact_t object. |
|
ret |
pointer to an address where to store the created idmef_impact_type_t object. |
prelude_string_t *
idmef_impact_get_description (idmef_impact_t *ptr
);
void idmef_impact_set_description (idmef_impact_t *ptr
,prelude_string_t *description
);
Set description
object as a children of ptr
.
if ptr
already contain an description
object, then it is destroyed,
and updated to point to the provided description
object.
ptr |
pointer to a idmef_impact_t object. |
|
description |
pointer to a prelude_string_t object. |
int idmef_impact_new_description (idmef_impact_t *ptr
,prelude_string_t **ret
);
Create a new description object, children of idmef_impact_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_impact_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_action_category_t
idmef_action_category_to_numeric (const char *name
);
const char *
idmef_action_category_to_string (idmef_action_category_t val
);
Return the IDMEF string equivalent of val
provided idmef_action_category_t value.
int
idmef_action_new (idmef_action_t **ret
);
Create a new idmef_action_t object.
int idmef_action_copy (const idmef_action_t *src
,idmef_action_t *dst
);
Copy a new idmef_action_t object from src
to dst
.
int idmef_action_clone (idmef_action_t *src
,idmef_action_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_action_t *
idmef_action_ref (idmef_action_t *action
);
Increase action
reference count, so that it can be referenced
multiple time.
void
idmef_action_destroy (idmef_action_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
idmef_action_category_t
idmef_action_get_category (idmef_action_t *ptr
);
Get category children of the idmef_action_t object.
void idmef_action_set_category (idmef_action_t *ptr
,idmef_action_category_t category
);
Set category
object as a children of ptr
.
if ptr
already contain an category
object, then it is destroyed,
and updated to point to the provided category
object.
ptr |
pointer to a idmef_action_t object. |
|
category |
pointer to a idmef_action_category_t object. |
int idmef_action_new_category (idmef_action_t *ptr
,idmef_action_category_t **ret
);
Create a new category object, children of idmef_action_t.
If ptr
already contain a idmef_action_category_t object, then it is destroyed.
ptr |
pointer to a idmef_action_t object. |
|
ret |
pointer to an address where to store the created idmef_action_category_t object. |
prelude_string_t *
idmef_action_get_description (idmef_action_t *ptr
);
void idmef_action_set_description (idmef_action_t *ptr
,prelude_string_t *description
);
Set description
object as a children of ptr
.
if ptr
already contain an description
object, then it is destroyed,
and updated to point to the provided description
object.
ptr |
pointer to a idmef_action_t object. |
|
description |
pointer to a prelude_string_t object. |
int idmef_action_new_description (idmef_action_t *ptr
,prelude_string_t **ret
);
Create a new description object, children of idmef_action_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_action_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_confidence_rating_t
idmef_confidence_rating_to_numeric (const char *name
);
const char *
idmef_confidence_rating_to_string (idmef_confidence_rating_t val
);
Return the IDMEF string equivalent of val
provided idmef_confidence_rating_t value.
int
idmef_confidence_new (idmef_confidence_t **ret
);
Create a new idmef_confidence_t object.
int idmef_confidence_copy (const idmef_confidence_t *src
,idmef_confidence_t *dst
);
Copy a new idmef_confidence_t object from src
to dst
.
int idmef_confidence_clone (idmef_confidence_t *src
,idmef_confidence_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_confidence_t *
idmef_confidence_ref (idmef_confidence_t *confidence
);
Increase confidence
reference count, so that it can be referenced
multiple time.
void
idmef_confidence_destroy (idmef_confidence_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
idmef_confidence_rating_t
idmef_confidence_get_rating (idmef_confidence_t *ptr
);
Get rating children of the idmef_confidence_t object.
void idmef_confidence_set_rating (idmef_confidence_t *ptr
,idmef_confidence_rating_t rating
);
Set rating
object as a children of ptr
.
if ptr
already contain an rating
object, then it is destroyed,
and updated to point to the provided rating
object.
ptr |
pointer to a idmef_confidence_t object. |
|
rating |
pointer to a idmef_confidence_rating_t object. |
int idmef_confidence_new_rating (idmef_confidence_t *ptr
,idmef_confidence_rating_t **ret
);
Create a new rating object, children of idmef_confidence_t.
If ptr
already contain a idmef_confidence_rating_t object, then it is destroyed.
ptr |
pointer to a idmef_confidence_t object. |
|
ret |
pointer to an address where to store the created idmef_confidence_rating_t object. |
float
idmef_confidence_get_confidence (idmef_confidence_t *ptr
);
Get confidence children of the idmef_confidence_t object.
void idmef_confidence_set_confidence (idmef_confidence_t *ptr
,float confidence
);
Set confidence
object as a children of ptr
.
if ptr
already contain an confidence
object, then it is destroyed,
and updated to point to the provided confidence
object.
int idmef_confidence_new_confidence (idmef_confidence_t *ptr
,float **ret
);
Create a new confidence object, children of idmef_confidence_t.
If ptr
already contain a float object, then it is destroyed.
ptr |
pointer to a idmef_confidence_t object. |
|
ret |
pointer to an address where to store the created float object. |
int
idmef_assessment_new (idmef_assessment_t **ret
);
Create a new idmef_assessment_t object.
int idmef_assessment_copy (const idmef_assessment_t *src
,idmef_assessment_t *dst
);
Copy a new idmef_assessment_t object from src
to dst
.
int idmef_assessment_clone (idmef_assessment_t *src
,idmef_assessment_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_assessment_t *
idmef_assessment_ref (idmef_assessment_t *assessment
);
Increase assessment
reference count, so that it can be referenced
multiple time.
void
idmef_assessment_destroy (idmef_assessment_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
idmef_impact_t *
idmef_assessment_get_impact (idmef_assessment_t *ptr
);
void idmef_assessment_set_impact (idmef_assessment_t *ptr
,idmef_impact_t *impact
);
Set impact
object as a children of ptr
.
if ptr
already contain an impact
object, then it is destroyed,
and updated to point to the provided impact
object.
int idmef_assessment_new_impact (idmef_assessment_t *ptr
,idmef_impact_t **ret
);
Create a new impact object, children of idmef_assessment_t.
If ptr
already contain a idmef_impact_t object, then it is destroyed.
ptr |
pointer to a idmef_assessment_t object. |
|
ret |
pointer to an address where to store the created idmef_impact_t object. |
idmef_action_t * idmef_assessment_get_next_action (idmef_assessment_t *assessment
,idmef_action_t *action_cur
);
Get the next idmef_action_t object listed in ptr
.
When iterating over the idmef_action_t object listed in ptr
,
object
should be set to the latest returned idmef_action_t object.
assessment |
pointer to a idmef_assessment_t object. |
|
action_cur |
pointer to a idmef_action_t object. |
void idmef_assessment_set_action (idmef_assessment_t *ptr
,idmef_action_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_action_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_assessment_t object. |
|
object |
pointer to a idmef_action_t object. |
|
pos |
Position in the list. |
int idmef_assessment_new_action (idmef_assessment_t *ptr
,idmef_action_t **ret
,int pos
);
Create a new idmef_action_t children of ptr
, and add it to position pos
of
ptr
list of idmef_action_t object. The created idmef_action_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_assessment_t object. |
|
ret |
pointer to an address where to store the created idmef_action_t object. |
|
pos |
position in the list. |
idmef_confidence_t *
idmef_assessment_get_confidence (idmef_assessment_t *ptr
);
void idmef_assessment_set_confidence (idmef_assessment_t *ptr
,idmef_confidence_t *confidence
);
Set confidence
object as a children of ptr
.
if ptr
already contain an confidence
object, then it is destroyed,
and updated to point to the provided confidence
object.
ptr |
pointer to a idmef_assessment_t object. |
|
confidence |
pointer to a idmef_confidence_t object. |
int idmef_assessment_new_confidence (idmef_assessment_t *ptr
,idmef_confidence_t **ret
);
Create a new confidence object, children of idmef_assessment_t.
If ptr
already contain a idmef_confidence_t object, then it is destroyed.
ptr |
pointer to a idmef_assessment_t object. |
|
ret |
pointer to an address where to store the created idmef_confidence_t object. |
int
idmef_tool_alert_new (idmef_tool_alert_t **ret
);
Create a new idmef_tool_alert_t object.
int idmef_tool_alert_copy (const idmef_tool_alert_t *src
,idmef_tool_alert_t *dst
);
Copy a new idmef_tool_alert_t object from src
to dst
.
int idmef_tool_alert_clone (idmef_tool_alert_t *src
,idmef_tool_alert_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_tool_alert_t *
idmef_tool_alert_ref (idmef_tool_alert_t *tool_alert
);
Increase tool_alert
reference count, so that it can be referenced
multiple time.
void
idmef_tool_alert_destroy (idmef_tool_alert_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
prelude_string_t *
idmef_tool_alert_get_name (idmef_tool_alert_t *ptr
);
void idmef_tool_alert_set_name (idmef_tool_alert_t *ptr
,prelude_string_t *name
);
Set name
object as a children of ptr
.
if ptr
already contain an name
object, then it is destroyed,
and updated to point to the provided name
object.
int idmef_tool_alert_new_name (idmef_tool_alert_t *ptr
,prelude_string_t **ret
);
Create a new name object, children of idmef_tool_alert_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_tool_alert_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
prelude_string_t *
idmef_tool_alert_get_command (idmef_tool_alert_t *ptr
);
void idmef_tool_alert_set_command (idmef_tool_alert_t *ptr
,prelude_string_t *command
);
Set command
object as a children of ptr
.
if ptr
already contain an command
object, then it is destroyed,
and updated to point to the provided command
object.
ptr |
pointer to a idmef_tool_alert_t object. |
|
command |
pointer to a prelude_string_t object. |
int idmef_tool_alert_new_command (idmef_tool_alert_t *ptr
,prelude_string_t **ret
);
Create a new command object, children of idmef_tool_alert_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_tool_alert_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_alertident_t * idmef_tool_alert_get_next_alertident (idmef_tool_alert_t *tool_alert
,idmef_alertident_t *alertident_cur
);
Get the next idmef_alertident_t object listed in ptr
.
When iterating over the idmef_alertident_t object listed in ptr
,
object
should be set to the latest returned idmef_alertident_t object.
tool_alert |
pointer to a idmef_tool_alert_t object. |
|
alertident_cur |
pointer to a idmef_alertident_t object. |
void idmef_tool_alert_set_alertident (idmef_tool_alert_t *ptr
,idmef_alertident_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_alertident_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_tool_alert_t object. |
|
object |
pointer to a idmef_alertident_t object. |
|
pos |
Position in the list. |
int idmef_tool_alert_new_alertident (idmef_tool_alert_t *ptr
,idmef_alertident_t **ret
,int pos
);
Create a new idmef_alertident_t children of ptr
, and add it to position pos
of
ptr
list of idmef_alertident_t object. The created idmef_alertident_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_tool_alert_t object. |
|
ret |
pointer to an address where to store the created idmef_alertident_t object. |
|
pos |
position in the list. |
int
idmef_correlation_alert_new (idmef_correlation_alert_t **ret
);
Create a new idmef_correlation_alert_t object.
int idmef_correlation_alert_copy (const idmef_correlation_alert_t *src
,idmef_correlation_alert_t *dst
);
Copy a new idmef_correlation_alert_t object from src
to dst
.
int idmef_correlation_alert_clone (idmef_correlation_alert_t *src
,idmef_correlation_alert_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_correlation_alert_t *
idmef_correlation_alert_ref (idmef_correlation_alert_t *correlation_alert
);
Increase correlation_alert
reference count, so that it can be referenced
multiple time.
void
idmef_correlation_alert_destroy (idmef_correlation_alert_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
prelude_string_t *
idmef_correlation_alert_get_name (idmef_correlation_alert_t *ptr
);
void idmef_correlation_alert_set_name (idmef_correlation_alert_t *ptr
,prelude_string_t *name
);
Set name
object as a children of ptr
.
if ptr
already contain an name
object, then it is destroyed,
and updated to point to the provided name
object.
ptr |
pointer to a idmef_correlation_alert_t object. |
|
name |
pointer to a prelude_string_t object. |
int idmef_correlation_alert_new_name (idmef_correlation_alert_t *ptr
,prelude_string_t **ret
);
Create a new name object, children of idmef_correlation_alert_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_correlation_alert_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_alertident_t * idmef_correlation_alert_get_next_alertident (idmef_correlation_alert_t *correlation_alert
,idmef_alertident_t *alertident_cur
);
Get the next idmef_alertident_t object listed in ptr
.
When iterating over the idmef_alertident_t object listed in ptr
,
object
should be set to the latest returned idmef_alertident_t object.
correlation_alert |
pointer to a idmef_correlation_alert_t object. |
|
alertident_cur |
pointer to a idmef_alertident_t object. |
void idmef_correlation_alert_set_alertident (idmef_correlation_alert_t *ptr
,idmef_alertident_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_alertident_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_correlation_alert_t object. |
|
object |
pointer to a idmef_alertident_t object. |
|
pos |
Position in the list. |
int idmef_correlation_alert_new_alertident (idmef_correlation_alert_t *ptr
,idmef_alertident_t **ret
,int pos
);
Create a new idmef_alertident_t children of ptr
, and add it to position pos
of
ptr
list of idmef_alertident_t object. The created idmef_alertident_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_correlation_alert_t object. |
|
ret |
pointer to an address where to store the created idmef_alertident_t object. |
|
pos |
position in the list. |
int
idmef_overflow_alert_new (idmef_overflow_alert_t **ret
);
Create a new idmef_overflow_alert_t object.
int idmef_overflow_alert_copy (const idmef_overflow_alert_t *src
,idmef_overflow_alert_t *dst
);
Copy a new idmef_overflow_alert_t object from src
to dst
.
int idmef_overflow_alert_clone (idmef_overflow_alert_t *src
,idmef_overflow_alert_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_overflow_alert_t *
idmef_overflow_alert_ref (idmef_overflow_alert_t *overflow_alert
);
Increase overflow_alert
reference count, so that it can be referenced
multiple time.
void
idmef_overflow_alert_destroy (idmef_overflow_alert_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
prelude_string_t *
idmef_overflow_alert_get_program (idmef_overflow_alert_t *ptr
);
void idmef_overflow_alert_set_program (idmef_overflow_alert_t *ptr
,prelude_string_t *program
);
Set program
object as a children of ptr
.
if ptr
already contain an program
object, then it is destroyed,
and updated to point to the provided program
object.
ptr |
pointer to a idmef_overflow_alert_t object. |
|
program |
pointer to a prelude_string_t object. |
int idmef_overflow_alert_new_program (idmef_overflow_alert_t *ptr
,prelude_string_t **ret
);
Create a new program object, children of idmef_overflow_alert_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_overflow_alert_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
void
idmef_overflow_alert_unset_size (idmef_overflow_alert_t *ptr
);
uint32_t *
idmef_overflow_alert_get_size (idmef_overflow_alert_t *ptr
);
void idmef_overflow_alert_set_size (idmef_overflow_alert_t *ptr
,uint32_t size
);
Set size
object as a children of ptr
.
if ptr
already contain an size
object, then it is destroyed,
and updated to point to the provided size
object.
int idmef_overflow_alert_new_size (idmef_overflow_alert_t *ptr
,uint32_t **ret
);
Create a new size object, children of idmef_overflow_alert_t.
If ptr
already contain a uint32_t object, then it is destroyed.
ptr |
pointer to a idmef_overflow_alert_t object. |
|
ret |
pointer to an address where to store the created uint32_t object. |
idmef_data_t *
idmef_overflow_alert_get_buffer (idmef_overflow_alert_t *ptr
);
void idmef_overflow_alert_set_buffer (idmef_overflow_alert_t *ptr
,idmef_data_t *buffer
);
Set buffer
object as a children of ptr
.
if ptr
already contain an buffer
object, then it is destroyed,
and updated to point to the provided buffer
object.
int idmef_overflow_alert_new_buffer (idmef_overflow_alert_t *ptr
,idmef_data_t **ret
);
Create a new buffer object, children of idmef_overflow_alert_t.
If ptr
already contain a idmef_data_t object, then it is destroyed.
ptr |
pointer to a idmef_overflow_alert_t object. |
|
ret |
pointer to an address where to store the created idmef_data_t object. |
const char *
idmef_alert_type_to_string (idmef_alert_type_t val
);
Return the IDMEF string equivalent of val
provided idmef_alert_type_t value.
int idmef_alert_copy (const idmef_alert_t *src
,idmef_alert_t *dst
);
Copy a new idmef_alert_t object from src
to dst
.
int idmef_alert_clone (idmef_alert_t *src
,idmef_alert_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_alert_t *
idmef_alert_ref (idmef_alert_t *alert
);
Increase alert
reference count, so that it can be referenced
multiple time.
void
idmef_alert_destroy (idmef_alert_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
void idmef_alert_set_messageid (idmef_alert_t *ptr
,prelude_string_t *messageid
);
Set messageid
object as a children of ptr
.
if ptr
already contain an messageid
object, then it is destroyed,
and updated to point to the provided messageid
object.
int idmef_alert_new_messageid (idmef_alert_t *ptr
,prelude_string_t **ret
);
Create a new messageid object, children of idmef_alert_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_alert_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_analyzer_t * idmef_alert_get_next_analyzer (idmef_alert_t *alert
,idmef_analyzer_t *analyzer_cur
);
Get the next idmef_analyzer_t object listed in ptr
.
When iterating over the idmef_analyzer_t object listed in ptr
,
object
should be set to the latest returned idmef_analyzer_t object.
alert |
pointer to a idmef_alert_t object. |
|
analyzer_cur |
pointer to a idmef_analyzer_t object. |
void idmef_alert_set_analyzer (idmef_alert_t *ptr
,idmef_analyzer_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_analyzer_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_alert_t object. |
|
object |
pointer to a idmef_analyzer_t object. |
|
pos |
Position in the list. |
int idmef_alert_new_analyzer (idmef_alert_t *ptr
,idmef_analyzer_t **ret
,int pos
);
Create a new idmef_analyzer_t children of ptr
, and add it to position pos
of
ptr
list of idmef_analyzer_t object. The created idmef_analyzer_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_alert_t object. |
|
ret |
pointer to an address where to store the created idmef_analyzer_t object. |
|
pos |
position in the list. |
void idmef_alert_set_create_time (idmef_alert_t *ptr
,idmef_time_t *create_time
);
Set create_time
object as a children of ptr
.
if ptr
already contain an create_time
object, then it is destroyed,
and updated to point to the provided create_time
object.
int idmef_alert_new_create_time (idmef_alert_t *ptr
,idmef_time_t **ret
);
Create a new create_time object, children of idmef_alert_t.
If ptr
already contain a idmef_time_t object, then it is destroyed.
ptr |
pointer to a idmef_alert_t object. |
|
ret |
pointer to an address where to store the created idmef_time_t object. |
idmef_classification_t *
idmef_alert_get_classification (idmef_alert_t *ptr
);
void idmef_alert_set_classification (idmef_alert_t *ptr
,idmef_classification_t *classification
);
Set classification
object as a children of ptr
.
if ptr
already contain an classification
object, then it is destroyed,
and updated to point to the provided classification
object.
ptr |
pointer to a idmef_alert_t object. |
|
classification |
pointer to a idmef_classification_t object. |
int idmef_alert_new_classification (idmef_alert_t *ptr
,idmef_classification_t **ret
);
Create a new classification object, children of idmef_alert_t.
If ptr
already contain a idmef_classification_t object, then it is destroyed.
ptr |
pointer to a idmef_alert_t object. |
|
ret |
pointer to an address where to store the created idmef_classification_t object. |
void idmef_alert_set_detect_time (idmef_alert_t *ptr
,idmef_time_t *detect_time
);
Set detect_time
object as a children of ptr
.
if ptr
already contain an detect_time
object, then it is destroyed,
and updated to point to the provided detect_time
object.
int idmef_alert_new_detect_time (idmef_alert_t *ptr
,idmef_time_t **ret
);
Create a new detect_time object, children of idmef_alert_t.
If ptr
already contain a idmef_time_t object, then it is destroyed.
ptr |
pointer to a idmef_alert_t object. |
|
ret |
pointer to an address where to store the created idmef_time_t object. |
void idmef_alert_set_analyzer_time (idmef_alert_t *ptr
,idmef_time_t *analyzer_time
);
Set analyzer_time
object as a children of ptr
.
if ptr
already contain an analyzer_time
object, then it is destroyed,
and updated to point to the provided analyzer_time
object.
int idmef_alert_new_analyzer_time (idmef_alert_t *ptr
,idmef_time_t **ret
);
Create a new analyzer_time object, children of idmef_alert_t.
If ptr
already contain a idmef_time_t object, then it is destroyed.
ptr |
pointer to a idmef_alert_t object. |
|
ret |
pointer to an address where to store the created idmef_time_t object. |
idmef_source_t * idmef_alert_get_next_source (idmef_alert_t *alert
,idmef_source_t *source_cur
);
Get the next idmef_source_t object listed in ptr
.
When iterating over the idmef_source_t object listed in ptr
,
object
should be set to the latest returned idmef_source_t object.
void idmef_alert_set_source (idmef_alert_t *ptr
,idmef_source_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_source_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_alert_t object. |
|
object |
pointer to a idmef_source_t object. |
|
pos |
Position in the list. |
int idmef_alert_new_source (idmef_alert_t *ptr
,idmef_source_t **ret
,int pos
);
Create a new idmef_source_t children of ptr
, and add it to position pos
of
ptr
list of idmef_source_t object. The created idmef_source_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_alert_t object. |
|
ret |
pointer to an address where to store the created idmef_source_t object. |
|
pos |
position in the list. |
idmef_target_t * idmef_alert_get_next_target (idmef_alert_t *alert
,idmef_target_t *target_cur
);
Get the next idmef_target_t object listed in ptr
.
When iterating over the idmef_target_t object listed in ptr
,
object
should be set to the latest returned idmef_target_t object.
void idmef_alert_set_target (idmef_alert_t *ptr
,idmef_target_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_target_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_alert_t object. |
|
object |
pointer to a idmef_target_t object. |
|
pos |
Position in the list. |
int idmef_alert_new_target (idmef_alert_t *ptr
,idmef_target_t **ret
,int pos
);
Create a new idmef_target_t children of ptr
, and add it to position pos
of
ptr
list of idmef_target_t object. The created idmef_target_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_alert_t object. |
|
ret |
pointer to an address where to store the created idmef_target_t object. |
|
pos |
position in the list. |
void idmef_alert_set_assessment (idmef_alert_t *ptr
,idmef_assessment_t *assessment
);
Set assessment
object as a children of ptr
.
if ptr
already contain an assessment
object, then it is destroyed,
and updated to point to the provided assessment
object.
ptr |
pointer to a idmef_alert_t object. |
|
assessment |
pointer to a idmef_assessment_t object. |
int idmef_alert_new_assessment (idmef_alert_t *ptr
,idmef_assessment_t **ret
);
Create a new assessment object, children of idmef_alert_t.
If ptr
already contain a idmef_assessment_t object, then it is destroyed.
ptr |
pointer to a idmef_alert_t object. |
|
ret |
pointer to an address where to store the created idmef_assessment_t object. |
idmef_additional_data_t * idmef_alert_get_next_additional_data (idmef_alert_t *alert
,idmef_additional_data_t *additional_data_cur
);
Get the next idmef_additional_data_t object listed in ptr
.
When iterating over the idmef_additional_data_t object listed in ptr
,
object
should be set to the latest returned idmef_additional_data_t object.
alert |
pointer to a idmef_alert_t object. |
|
additional_data_cur |
pointer to a idmef_additional_data_t object. |
void idmef_alert_set_additional_data (idmef_alert_t *ptr
,idmef_additional_data_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_additional_data_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_alert_t object. |
|
object |
pointer to a idmef_additional_data_t object. |
|
pos |
Position in the list. |
int idmef_alert_new_additional_data (idmef_alert_t *ptr
,idmef_additional_data_t **ret
,int pos
);
Create a new idmef_additional_data_t children of ptr
, and add it to position pos
of
ptr
list of idmef_additional_data_t object. The created idmef_additional_data_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_alert_t object. |
|
ret |
pointer to an address where to store the created idmef_additional_data_t object. |
|
pos |
position in the list. |
idmef_alert_type_t
idmef_alert_get_type (idmef_alert_t *ptr
);
Access the type children of ptr
.
idmef_tool_alert_t *
idmef_alert_get_tool_alert (idmef_alert_t *ptr
);
Access the tool_alert children of ptr
.
void idmef_alert_set_tool_alert (idmef_alert_t *ptr
,idmef_tool_alert_t *tool_alert
);
Set tool_alert
object as a children of ptr
.
if ptr
already contain a tool_alert
object, then it is destroyed,
and updated to point to the provided tool_alert
object.
ptr |
pointer to a idmef_alert_t object. |
|
tool_alert |
pointer to a idmef_tool_alert_t object. |
int idmef_alert_new_tool_alert (idmef_alert_t *ptr
,idmef_tool_alert_t **ret
);
Create a new idmef_tool_alert_t object, children of idmef_alert_t.
If ptr
already contain a idmef_tool_alert_t object, then it is destroyed.
ptr |
pointer to a idmef_alert_t object. |
|
ret |
pointer where to store the created idmef_tool_alert_t object. |
idmef_correlation_alert_t *
idmef_alert_get_correlation_alert (idmef_alert_t *ptr
);
Access the correlation_alert children of ptr
.
void idmef_alert_set_correlation_alert (idmef_alert_t *ptr
,idmef_correlation_alert_t *correlation_alert
);
Set correlation_alert
object as a children of ptr
.
if ptr
already contain a correlation_alert
object, then it is destroyed,
and updated to point to the provided correlation_alert
object.
ptr |
pointer to a idmef_alert_t object. |
|
correlation_alert |
pointer to a idmef_correlation_alert_t object. |
int idmef_alert_new_correlation_alert (idmef_alert_t *ptr
,idmef_correlation_alert_t **ret
);
Create a new idmef_correlation_alert_t object, children of idmef_alert_t.
If ptr
already contain a idmef_correlation_alert_t object, then it is destroyed.
ptr |
pointer to a idmef_alert_t object. |
|
ret |
pointer where to store the created idmef_correlation_alert_t object. |
idmef_overflow_alert_t *
idmef_alert_get_overflow_alert (idmef_alert_t *ptr
);
Access the overflow_alert children of ptr
.
void idmef_alert_set_overflow_alert (idmef_alert_t *ptr
,idmef_overflow_alert_t *overflow_alert
);
Set overflow_alert
object as a children of ptr
.
if ptr
already contain a overflow_alert
object, then it is destroyed,
and updated to point to the provided overflow_alert
object.
ptr |
pointer to a idmef_alert_t object. |
|
overflow_alert |
pointer to a idmef_overflow_alert_t object. |
int idmef_alert_new_overflow_alert (idmef_alert_t *ptr
,idmef_overflow_alert_t **ret
);
Create a new idmef_overflow_alert_t object, children of idmef_alert_t.
If ptr
already contain a idmef_overflow_alert_t object, then it is destroyed.
ptr |
pointer to a idmef_alert_t object. |
|
ret |
pointer where to store the created idmef_overflow_alert_t object. |
int
idmef_heartbeat_new (idmef_heartbeat_t **ret
);
Create a new idmef_heartbeat_t object.
int idmef_heartbeat_copy (const idmef_heartbeat_t *src
,idmef_heartbeat_t *dst
);
Copy a new idmef_heartbeat_t object from src
to dst
.
int idmef_heartbeat_clone (idmef_heartbeat_t *src
,idmef_heartbeat_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_heartbeat_t *
idmef_heartbeat_ref (idmef_heartbeat_t *heartbeat
);
Increase heartbeat
reference count, so that it can be referenced
multiple time.
void
idmef_heartbeat_destroy (idmef_heartbeat_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
prelude_string_t *
idmef_heartbeat_get_messageid (idmef_heartbeat_t *ptr
);
void idmef_heartbeat_set_messageid (idmef_heartbeat_t *ptr
,prelude_string_t *messageid
);
Set messageid
object as a children of ptr
.
if ptr
already contain an messageid
object, then it is destroyed,
and updated to point to the provided messageid
object.
ptr |
pointer to a idmef_heartbeat_t object. |
|
messageid |
pointer to a prelude_string_t object. |
int idmef_heartbeat_new_messageid (idmef_heartbeat_t *ptr
,prelude_string_t **ret
);
Create a new messageid object, children of idmef_heartbeat_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_heartbeat_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_analyzer_t * idmef_heartbeat_get_next_analyzer (idmef_heartbeat_t *heartbeat
,idmef_analyzer_t *analyzer_cur
);
Get the next idmef_analyzer_t object listed in ptr
.
When iterating over the idmef_analyzer_t object listed in ptr
,
object
should be set to the latest returned idmef_analyzer_t object.
heartbeat |
pointer to a idmef_heartbeat_t object. |
|
analyzer_cur |
pointer to a idmef_analyzer_t object. |
void idmef_heartbeat_set_analyzer (idmef_heartbeat_t *ptr
,idmef_analyzer_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_analyzer_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_heartbeat_t object. |
|
object |
pointer to a idmef_analyzer_t object. |
|
pos |
Position in the list. |
int idmef_heartbeat_new_analyzer (idmef_heartbeat_t *ptr
,idmef_analyzer_t **ret
,int pos
);
Create a new idmef_analyzer_t children of ptr
, and add it to position pos
of
ptr
list of idmef_analyzer_t object. The created idmef_analyzer_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_heartbeat_t object. |
|
ret |
pointer to an address where to store the created idmef_analyzer_t object. |
|
pos |
position in the list. |
idmef_time_t *
idmef_heartbeat_get_create_time (idmef_heartbeat_t *ptr
);
void idmef_heartbeat_set_create_time (idmef_heartbeat_t *ptr
,idmef_time_t *create_time
);
Set create_time
object as a children of ptr
.
if ptr
already contain an create_time
object, then it is destroyed,
and updated to point to the provided create_time
object.
int idmef_heartbeat_new_create_time (idmef_heartbeat_t *ptr
,idmef_time_t **ret
);
Create a new create_time object, children of idmef_heartbeat_t.
If ptr
already contain a idmef_time_t object, then it is destroyed.
ptr |
pointer to a idmef_heartbeat_t object. |
|
ret |
pointer to an address where to store the created idmef_time_t object. |
idmef_time_t *
idmef_heartbeat_get_analyzer_time (idmef_heartbeat_t *ptr
);
void idmef_heartbeat_set_analyzer_time (idmef_heartbeat_t *ptr
,idmef_time_t *analyzer_time
);
Set analyzer_time
object as a children of ptr
.
if ptr
already contain an analyzer_time
object, then it is destroyed,
and updated to point to the provided analyzer_time
object.
ptr |
pointer to a idmef_heartbeat_t object. |
|
analyzer_time |
pointer to a idmef_time_t object. |
int idmef_heartbeat_new_analyzer_time (idmef_heartbeat_t *ptr
,idmef_time_t **ret
);
Create a new analyzer_time object, children of idmef_heartbeat_t.
If ptr
already contain a idmef_time_t object, then it is destroyed.
ptr |
pointer to a idmef_heartbeat_t object. |
|
ret |
pointer to an address where to store the created idmef_time_t object. |
void
idmef_heartbeat_unset_heartbeat_interval
(idmef_heartbeat_t *ptr
);
uint32_t *
idmef_heartbeat_get_heartbeat_interval
(idmef_heartbeat_t *ptr
);
void idmef_heartbeat_set_heartbeat_interval (idmef_heartbeat_t *ptr
,uint32_t heartbeat_interval
);
Set heartbeat_interval
object as a children of ptr
.
if ptr
already contain an heartbeat_interval
object, then it is destroyed,
and updated to point to the provided heartbeat_interval
object.
ptr |
pointer to a idmef_heartbeat_t object. |
|
heartbeat_interval |
pointer to a uint32_t object. |
int idmef_heartbeat_new_heartbeat_interval (idmef_heartbeat_t *ptr
,uint32_t **ret
);
Create a new heartbeat_interval object, children of idmef_heartbeat_t.
If ptr
already contain a uint32_t object, then it is destroyed.
ptr |
pointer to a idmef_heartbeat_t object. |
|
ret |
pointer to an address where to store the created uint32_t object. |
idmef_additional_data_t * idmef_heartbeat_get_next_additional_data (idmef_heartbeat_t *heartbeat
,idmef_additional_data_t *additional_data_cur
);
Get the next idmef_additional_data_t object listed in ptr
.
When iterating over the idmef_additional_data_t object listed in ptr
,
object
should be set to the latest returned idmef_additional_data_t object.
heartbeat |
pointer to a idmef_heartbeat_t object. |
|
additional_data_cur |
pointer to a idmef_additional_data_t object. |
void idmef_heartbeat_set_additional_data (idmef_heartbeat_t *ptr
,idmef_additional_data_t *object
,int pos
);
Add object
to position pos
of ptr
list of idmef_additional_data_t object.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_heartbeat_t object. |
|
object |
pointer to a idmef_additional_data_t object. |
|
pos |
Position in the list. |
int idmef_heartbeat_new_additional_data (idmef_heartbeat_t *ptr
,idmef_additional_data_t **ret
,int pos
);
Create a new idmef_additional_data_t children of ptr
, and add it to position pos
of
ptr
list of idmef_additional_data_t object. The created idmef_additional_data_t object is
stored in ret
.
If pos
is IDMEF_LIST_APPEND, object
will be inserted at the tail of the list.
If pos
is IDMEF_LIST_PREPEND, object
will be inserted at the head of the list.
ptr |
pointer to a idmef_heartbeat_t object. |
|
ret |
pointer to an address where to store the created idmef_additional_data_t object. |
|
pos |
position in the list. |
idmef_message_type_t
idmef_message_type_to_numeric (const char *name
);
const char *
idmef_message_type_to_string (idmef_message_type_t val
);
Return the IDMEF string equivalent of val
provided idmef_message_type_t value.
int
idmef_message_new (idmef_message_t **ret
);
Create a new idmef_message_t object.
int idmef_message_copy (const idmef_message_t *src
,idmef_message_t *dst
);
Copy a new idmef_message_t object from src
to dst
.
int idmef_message_clone (idmef_message_t *src
,idmef_message_t **dst
);
Create a copy of src
, and store it in dst
.
idmef_message_t *
idmef_message_ref (idmef_message_t *message
);
Increase message
reference count, so that it can be referenced
multiple time.
void
idmef_message_destroy (idmef_message_t *ptr
);
Destroy ptr
and all of it's children.
The objects are only destroyed if their reference count reach zero.
void idmef_message_set_version (idmef_message_t *ptr
,prelude_string_t *version
);
Set version
object as a children of ptr
.
if ptr
already contain an version
object, then it is destroyed,
and updated to point to the provided version
object.
int idmef_message_new_version (idmef_message_t *ptr
,prelude_string_t **ret
);
Create a new version object, children of idmef_message_t.
If ptr
already contain a prelude_string_t object, then it is destroyed.
ptr |
pointer to a idmef_message_t object. |
|
ret |
pointer to an address where to store the created prelude_string_t object. |
idmef_message_type_t
idmef_message_get_type (idmef_message_t *ptr
);
Access the type children of ptr
.
idmef_alert_t *
idmef_message_get_alert (idmef_message_t *ptr
);
Access the alert children of ptr
.
void idmef_message_set_alert (idmef_message_t *ptr
,idmef_alert_t *alert
);
Set alert
object as a children of ptr
.
if ptr
already contain a alert
object, then it is destroyed,
and updated to point to the provided alert
object.
int idmef_message_new_alert (idmef_message_t *ptr
,idmef_alert_t **ret
);
Create a new idmef_alert_t object, children of idmef_message_t.
If ptr
already contain a idmef_alert_t object, then it is destroyed.
ptr |
pointer to a idmef_message_t object. |
|
ret |
pointer where to store the created idmef_alert_t object. |
idmef_heartbeat_t *
idmef_message_get_heartbeat (idmef_message_t *ptr
);
Access the heartbeat children of ptr
.
void idmef_message_set_heartbeat (idmef_message_t *ptr
,idmef_heartbeat_t *heartbeat
);
Set heartbeat
object as a children of ptr
.
if ptr
already contain a heartbeat
object, then it is destroyed,
and updated to point to the provided heartbeat
object.
ptr |
pointer to a idmef_message_t object. |
|
heartbeat |
pointer to a idmef_heartbeat_t object. |
int idmef_message_new_heartbeat (idmef_message_t *ptr
,idmef_heartbeat_t **ret
);
Create a new idmef_heartbeat_t object, children of idmef_message_t.
If ptr
already contain a idmef_heartbeat_t object, then it is destroyed.
ptr |
pointer to a idmef_message_t object. |
|
ret |
pointer where to store the created idmef_heartbeat_t object. |
void idmef_message_set_pmsg (idmef_message_t *message
,prelude_msg_t *msg
);
int idmef_action_compare (const idmef_action_t *obj1
,const idmef_action_t *obj2
);
Compare obj1
with obj2
.
int idmef_additional_data_compare (const idmef_additional_data_t *obj1
,const idmef_additional_data_t *obj2
);
Compare obj1
with obj2
.
int idmef_address_compare (const idmef_address_t *obj1
,const idmef_address_t *obj2
);
Compare obj1
with obj2
.
int idmef_alert_compare (const idmef_alert_t *obj1
,const idmef_alert_t *obj2
);
Compare obj1
with obj2
.
int idmef_alertident_compare (const idmef_alertident_t *obj1
,const idmef_alertident_t *obj2
);
Compare obj1
with obj2
.
int idmef_analyzer_compare (const idmef_analyzer_t *obj1
,const idmef_analyzer_t *obj2
);
Compare obj1
with obj2
.
int idmef_assessment_compare (const idmef_assessment_t *obj1
,const idmef_assessment_t *obj2
);
Compare obj1
with obj2
.
int idmef_checksum_compare (const idmef_checksum_t *obj1
,const idmef_checksum_t *obj2
);
Compare obj1
with obj2
.
int idmef_classification_compare (const idmef_classification_t *obj1
,const idmef_classification_t *obj2
);
Compare obj1
with obj2
.
int idmef_confidence_compare (const idmef_confidence_t *obj1
,const idmef_confidence_t *obj2
);
Compare obj1
with obj2
.
int idmef_correlation_alert_compare (const idmef_correlation_alert_t *obj1
,const idmef_correlation_alert_t *obj2
);
Compare obj1
with obj2
.
int idmef_data_compare (const idmef_data_t *data1
,const idmef_data_t *data2
);
int idmef_file_access_compare (const idmef_file_access_t *obj1
,const idmef_file_access_t *obj2
);
Compare obj1
with obj2
.
int idmef_file_compare (const idmef_file_t *obj1
,const idmef_file_t *obj2
);
Compare obj1
with obj2
.
int idmef_heartbeat_compare (const idmef_heartbeat_t *obj1
,const idmef_heartbeat_t *obj2
);
Compare obj1
with obj2
.
int idmef_impact_compare (const idmef_impact_t *obj1
,const idmef_impact_t *obj2
);
Compare obj1
with obj2
.
int idmef_inode_compare (const idmef_inode_t *obj1
,const idmef_inode_t *obj2
);
Compare obj1
with obj2
.
int idmef_linkage_compare (const idmef_linkage_t *obj1
,const idmef_linkage_t *obj2
);
Compare obj1
with obj2
.
int idmef_message_compare (const idmef_message_t *obj1
,const idmef_message_t *obj2
);
Compare obj1
with obj2
.
int idmef_node_compare (const idmef_node_t *obj1
,const idmef_node_t *obj2
);
Compare obj1
with obj2
.
int idmef_overflow_alert_compare (const idmef_overflow_alert_t *obj1
,const idmef_overflow_alert_t *obj2
);
Compare obj1
with obj2
.
int idmef_process_compare (const idmef_process_t *obj1
,const idmef_process_t *obj2
);
Compare obj1
with obj2
.
int idmef_reference_compare (const idmef_reference_t *obj1
,const idmef_reference_t *obj2
);
Compare obj1
with obj2
.
int idmef_service_compare (const idmef_service_t *obj1
,const idmef_service_t *obj2
);
Compare obj1
with obj2
.
int idmef_snmp_service_compare (const idmef_snmp_service_t *obj1
,const idmef_snmp_service_t *obj2
);
Compare obj1
with obj2
.
int idmef_source_compare (const idmef_source_t *obj1
,const idmef_source_t *obj2
);
Compare obj1
with obj2
.
int idmef_target_compare (const idmef_target_t *obj1
,const idmef_target_t *obj2
);
Compare obj1
with obj2
.
int idmef_time_compare (const idmef_time_t *time1
,const idmef_time_t *time2
);
time1 |
Pointer to an idmef_time_t object to compare with |
|
time2 |
Pointer to an idmef_time_t object to compare with |
int idmef_tool_alert_compare (const idmef_tool_alert_t *obj1
,const idmef_tool_alert_t *obj2
);
Compare obj1
with obj2
.
int idmef_user_compare (const idmef_user_t *obj1
,const idmef_user_t *obj2
);
Compare obj1
with obj2
.
int idmef_user_id_compare (const idmef_user_id_t *obj1
,const idmef_user_id_t *obj2
);
Compare obj1
with obj2
.
int idmef_web_service_compare (const idmef_web_service_t *obj1
,const idmef_web_service_t *obj2
);
Compare obj1
with obj2
.