barnyard2waldo 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 8ea356aadbeba9653bd72431d7ec048454b90eb7
+  data.tar.gz: 1ef02ba555722bd6f099692a7ae86b3c7619b77a
+SHA512:
+  metadata.gz: 31cc75f49de447912ed88026e94353fb92e4cab859f0c2d54804442a8bea729e5380b0f08a5635ec93af582dfffe5b0ca454a6b44adc4fa51abcb54f213fccdc
+  data.tar.gz: 2609c78812e21ad443354d2e06240133ad52256d4d86fe10f07afdb466818ecb1c1e54899f6f1954daf7fdb4cac690eceb446478625928d89ca83801f8064f78

data/.gitignore

@@ -0,0 +1,17 @@
+*.gem
+*.rbc
+.bundle
+.config
+.yardoc
+Gemfile.lock
+InstalledFiles
+_yardoc
+coverage
+doc/
+lib/bundler/man
+pkg
+rdoc
+spec/reports
+test/tmp
+test/version_tmp
+tmp

data/.travis.yml

@@ -0,0 +1,15 @@
+language: ruby
+
+before_install: "gem install bundler"
+install:        "bundle install"
+
+script: "rake"
+
+rvm:
+  - 1.9.3
+  - 2.0.0
+  - 2.1.1
+
+addons:
+  code_climate:
+    repo_token: f6dd2e0a5649c0fca6e159ee735ea367d39035f1ba8c0e67ceea66dc894269d0

data/Gemfile

@@ -0,0 +1,7 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in gemspec
+gemspec
+
+# Put other dynamic build / pre-release gems here.
+# Putting gems in a Gemfile does not install them during gem install foo! - Only developement hybrid environments use this.

data/LICENSE

@@ -0,0 +1,22 @@
+Copyright (c) 2012 Scott MacGregor
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,42 @@
+# barnyard2-waldo
+
+[![Gem Version](https://badge.fury.io/rb/barnyard2waldo.png)](http://badge.fury.io/rb/barnyard2waldo)
+[![Gem](https://img.shields.io/gem/dt/barnyard2waldo.svg)](http://badge.fury.io/rb/barnyard2waldo)
+
+Describe the waldo bookmark for barnyard2
+
+## Code Status
+
+[![Build Status](https://travis-ci.org/shadowbq/barnyard2-waldo.svg?branch=master)](https://travis-ci.org/shadowbq/barnyard2-waldo)
+[![Code Climate](https://codeclimate.com/github/shadowbq/barnyard2-waldo/badges/gpa.svg)](https://codeclimate.com/github/shadowbq/barnyard2-waldo)
+[![Test Coverage](https://codeclimate.com/github/shadowbq/barnyard2-waldo/badges/coverage.svg)](https://codeclimate.com/github/shadowbq/barnyard2-waldo)
+[![GitHub tag](https://img.shields.io/github/tag/shadowbq/barnyard2-waldo.svg)](http://github.com/shadowbq/barnyard2-waldo)
+
+This simple scripts provides a decoded output for the barnyard2 bookmark file (waldo file)
+
+## Installation
+
+`$> gem install barnyard2waldo`
+
+## Usage
+
+```shell
+$> waldo
+Barnyard spool: /var/log/snort/merged.log.1426175522
+Record Idx: 119879
+2015-03-12 11:52:02 -0400
+```
+
+## Extended Help
+
+```shell
+$> waldo -h
+Usage: waldo [OPTIONS]
+    -b                               Bookmark file
+                                       Default: /var/spool/barnyard.waldo
+Options::
+    -h, --help                       Display this screen
+```
+
+## Reference:
+https://github.com/firnsy/barnyard2/blob/master/src/spooler.c

data/Rakefile

@@ -0,0 +1,12 @@
+#!/usr/bin/env rake
+require "bundler/gem_tasks"
+require "rake/testtask"
+
+task :default => [:test]
+
+Rake::TestTask.new do |test|
+    test.libs << "lib"
+  test.libs << "test"
+  test.test_files = Dir[ "test/test_*.rb" ]
+  test.verbose = true
+end

data/barnyard2waldo.gemspec

@@ -0,0 +1,26 @@
+$LOAD_PATH.unshift File.expand_path('../lib', __FILE__)
+name = "barnyard2waldo"
+require "#{name}/version"
+
+
+Gem::Specification.new do |gem|
+  gem.platform      = Gem::Platform::RUBY
+  gem.authors       = ["shadowbq"]
+  gem.email         = ["shadowbq@gmail.com"]
+  gem.description   = %q{Describe the waldo bookmark for barnyard2}
+  gem.summary       = gem.description
+  gem.homepage      = "https://github.com/shadowbq/barnyard2-waldo"
+
+  gem.files         = `git ls-files`.split($\)
+  gem.executables   = gem.files.grep(%r{^bin/}).map{ |f| File.basename(f) }
+  gem.test_files    = gem.files.grep(%r{^(test|spec|features)/})
+  gem.name          = "barnyard2waldo"
+  gem.require_paths = ["lib"]
+  gem.version       = Barnyard2::Waldo::VERSION
+  gem.license       = 'MIT'
+
+  gem.add_development_dependency('bump', '~> 0.3')
+  gem.add_development_dependency('minitest', '~> 5.5')
+  gem.add_development_dependency('ansi', '~> 1.5')
+  gem.add_development_dependency('simplecov', '0.9.2')
+end

data/bin/waldo

@@ -0,0 +1,12 @@
+#!/usr/bin/env ruby
+begin
+  require 'rubygems'
+  require 'bundler'
+  Bundler.setup(:default)
+rescue ::Exception => e
+end
+
+# Executable with absolute path to lib for hacking and development
+require File.join(File.dirname(__FILE__), '..', 'lib', 'barnyard2waldo', 'cli')
+
+Barnyard2::Waldo::CLI.invoke

data/build-gem.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+if [ -f ./README.md ] && [ -f ./LICENSE ];
+then
+  echo "Removing old gem.."
+	gem uninstall -x barnyard2waldo
+	echo "Building gem.."
+	gem build barnyard2waldo.gemspec
+	echo "Installing gem.."
+	gem install barnyard2waldo-`bump current |grep -o [0-9].*`.gem
+	git status
+	echo "Validating gem.."
+	gem list --local |grep barnyard2waldo
+else
+	echo "not in root gem directory, existing."
+fi

data/lib/barnyard2waldo/cli.rb

@@ -0,0 +1,55 @@
+require 'optparse'
+require 'barnyard2waldo'
+
+
+module Barnyard2
+  module Waldo
+    class CLI
+
+      def self.invoke
+        self.new
+      end
+
+      def initialize
+        options = {}
+        options[:bookmark] = Barnyard2::Waldo::Defaults::Bookmark
+
+        opt_parser = OptionParser.new do |opt|
+          opt.banner = "Usage: waldo [OPTIONS]"
+
+          opt.on("-b","Bookmark file","  Default: #{options[:bookmark]}") do |value|
+            options[:bookmark] = value
+          end
+
+          opt.separator "Options::"
+
+          opt.on_tail("-h","--help","Display this screen") do
+            puts opt_parser
+            exit 0
+          end
+
+        end
+
+        #Verify the options
+        begin
+        #  raise unless ARGV.size > 0
+          opt_parser.parse!
+
+        #If options fail display help
+        #rescue Exception => e
+        #  puts e.message
+        #  puts e.backtrace.inspect
+        rescue
+          puts opt_parser
+          exit
+        end
+
+        finder = Barnyard2::Waldo::Where.new(options[:bookmark])
+        puts finder
+
+      end
+
+    end #Class
+
+  end #module
+end #module

data/lib/barnyard2waldo/main.rb

@@ -0,0 +1,11 @@
+module Barnyard2
+  module Waldo
+
+    class CustomError < StandardError; end
+
+    module Defaults
+        Bookmark = '/var/spool/barnyard.waldo'
+    end
+
+  end
+end

data/lib/barnyard2waldo/version.rb

@@ -0,0 +1,5 @@
+module Barnyard2
+  module Waldo
+    VERSION = "0.0.1"
+  end
+end

data/lib/barnyard2waldo/where.rb

@@ -0,0 +1,33 @@
+module Barnyard2
+  module Waldo
+
+    class Where
+
+      attr_reader :spool_dir, :spool_filebase, :epoch, :record
+
+      def initialize (bookmark=Barnyard2::Waldo::Defaults::Bookmark)
+        fp = open(bookmark, 'rb')
+        s = fp.read(Barnyard2::Waldo::MAX_FILEPATH_BUF)
+        @spool_dir = s.strip
+
+        s = fp.read(Barnyard2::Waldo::MAX_FILEPATH_BUF)
+        @spool_filebase = s.strip
+
+        s = fp.read(Barnyard2::Waldo::UINT32_t)
+        @epoch = s.unpack('V').first
+
+        s = fp.read(Barnyard2::Waldo::UINT32_t)
+        @record = s.unpack('V').first
+      ensure
+        fp.close
+      end
+
+      # Unpack the bytes and the array:
+      def to_s
+        "Barnyard spool: #{@spool_dir}/#{@spool_filebase}.#{@epoch}\nRecord Idx: #{@record}\n#{Time.at(@epoch)}"
+      end
+
+    end
+
+  end
+end

data/lib/barnyard2waldo.rb

@@ -0,0 +1,16 @@
+#STDLIBS
+require 'rubygems'
+
+module Barnyard2
+  module Waldo
+    $:.unshift(File.dirname(__FILE__))
+
+    MAX_FILEPATH_BUF = 1024
+    UINT32_t = 4
+
+    require "barnyard2waldo/main"
+    require "barnyard2waldo/version"
+    require "barnyard2waldo/where"
+
+  end
+end

data/test/test_helper.rb

@@ -0,0 +1,17 @@
+require 'rubygems'
+require 'bundler/setup'
+
+require 'simplecov'
+SimpleCov.start do
+  add_filter "/test/"
+  add_group "Bin", "/lib/cli"
+  add_group "Lib", "/lib"
+end
+
+gem "minitest"
+require 'minitest/autorun'
+require 'minitest/spec'
+require 'minitest/pride'
+
+require File.join(File.dirname(__FILE__), '..', 'lib', 'barnyard2waldo', 'cli')
+require File.join(File.dirname(__FILE__), '..', 'lib', 'barnyard2waldo')

data/test/test_waldo.rb

@@ -0,0 +1,29 @@
+require 'test_helper'
+require 'minitest/spec'
+
+describe Barnyard2::Waldo::Where do
+  before do
+    @where = Barnyard2::Waldo::Where.new('test/data/barnyard.waldo')
+  end
+
+  describe "when looking for waldo" do
+    it "should seek correctly" do
+      @where.spool_dir.must_equal '/var/log/snort'
+    end
+    it "should respond positively" do
+      @where.spool_filebase.must_equal 'merged.log'
+    end
+    it "should return epoch" do
+      @where.epoch.must_equal 1426175522
+    end
+    it "should return the idx" do
+      @where.record.must_equal 119879
+    end
+  end
+
+  describe "when asking to print" do
+    it "it should print the string" do
+      @where.to_s.must_equal "Barnyard spool: /var/log/snort/merged.log.1426175522\nRecord Idx: 119879\n2015-03-12 11:52:02 -0400"
+    end
+  end
+end

metadata

@@ -0,0 +1,121 @@
+--- !ruby/object:Gem::Specification
+name: barnyard2waldo
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- shadowbq
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-05-15 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bump
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.3'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.3'
+- !ruby/object:Gem::Dependency
+  name: minitest
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.5'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.5'
+- !ruby/object:Gem::Dependency
+  name: ansi
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.5'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.5'
+- !ruby/object:Gem::Dependency
+  name: simplecov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.9.2
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.9.2
+description: Describe the waldo bookmark for barnyard2
+email:
+- shadowbq@gmail.com
+executables:
+- waldo
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".travis.yml"
+- Gemfile
+- LICENSE
+- README.md
+- Rakefile
+- barnyard2waldo.gemspec
+- bin/waldo
+- build-gem.sh
+- lib/barnyard2waldo.rb
+- lib/barnyard2waldo/cli.rb
+- lib/barnyard2waldo/main.rb
+- lib/barnyard2waldo/version.rb
+- lib/barnyard2waldo/where.rb
+- test/data/barnyard.waldo
+- test/test_helper.rb
+- test/test_waldo.rb
+homepage: https://github.com/shadowbq/barnyard2-waldo
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.2
+signing_key: 
+specification_version: 4
+summary: Describe the waldo bookmark for barnyard2
+test_files:
+- test/data/barnyard.waldo
+- test/test_helper.rb
+- test/test_waldo.rb