trisulrp 3.1.8 → 3.1.11
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/VERSION +1 -1
- data/lib/trisulrp/protocol.rb +29 -0
- data/lib/trisulrp/trp.pb.rb +6 -2
- data/lib/trisulrp/trp.proto +13 -9
- data/trisulrp.gemspec +3 -3
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 8a80ac5c8d010546f72f43d0ca8fe943fab65efc
|
4
|
+
data.tar.gz: b2eb01d960d26429a6c335beeaa6c6ccf5099d26
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 7cbffac3de814341c645c485f0eef0d3c3bc70780b0da80c3300ce8e9b12e24754681786ec7cea54c16e55a217e9e35874970f3224496e07036dc0c4e99365b6
|
7
|
+
data.tar.gz: e822fac8f5a674ab084928f34aad57b7fdffb139e5c510bda678c050a2dfe00a44168abf985220f854c10df13548c75e320662c8a3b28dbd8aaaf3d12a70d166
|
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
3.1.
|
1
|
+
3.1.11
|
data/lib/trisulrp/protocol.rb
CHANGED
@@ -237,6 +237,35 @@ module TrisulRP::Protocol
|
|
237
237
|
|
238
238
|
end
|
239
239
|
|
240
|
+
# used in Trisul Domain
|
241
|
+
# send trp_request as async, then poll for completion and return
|
242
|
+
# this does not block the domain network
|
243
|
+
#
|
244
|
+
def get_response_zmq_async(endpoint, trp_request, timeout_seconds = -1 )
|
245
|
+
|
246
|
+
# first get a resp.token ASYNC, then poll for it
|
247
|
+
trp_request.run_async=true
|
248
|
+
resp=get_response_zmq(endpoint, trp_request, timeout_seconds)
|
249
|
+
|
250
|
+
trp_resp_command_id = resp.instance_variable_get("@trp_resp_command_id")
|
251
|
+
|
252
|
+
while trp_resp_command_id == TRP::Message::Command::ASYNC_RESPONSE do
|
253
|
+
async_req = TrisulRP::Protocol.mk_request(
|
254
|
+
TRP::Message::Command::ASYNC_REQUEST,
|
255
|
+
{
|
256
|
+
token:resp.token,
|
257
|
+
destination_node:trp_request.destination_node,
|
258
|
+
sleep:2
|
259
|
+
}
|
260
|
+
)
|
261
|
+
resp=get_response_zmq(endpoint,async_req, timeout_seconds)
|
262
|
+
trp_resp_command_id = resp.instance_variable_get("@trp_resp_command_id")
|
263
|
+
end
|
264
|
+
|
265
|
+
return resp
|
266
|
+
|
267
|
+
end
|
268
|
+
|
240
269
|
|
241
270
|
|
242
271
|
# Query the total time window available in Trisul
|
data/lib/trisulrp/trp.pb.rb
CHANGED
@@ -25,6 +25,7 @@ module TRP
|
|
25
25
|
class PcapFormat < ::Protobuf::Enum
|
26
26
|
define :LIBPCAP, 1
|
27
27
|
define :UNSNIFF, 2
|
28
|
+
define :LIBPCAPNOFILEHEADER, 3
|
28
29
|
end
|
29
30
|
|
30
31
|
class DomainNodeType < ::Protobuf::Enum
|
@@ -353,11 +354,13 @@ module TRP
|
|
353
354
|
optional ::TRP::KeyT, :classification, 9
|
354
355
|
optional ::TRP::KeyT, :priority, 10
|
355
356
|
optional ::TRP::Timestamp, :dispatch_time, 11
|
356
|
-
optional :string, :
|
357
|
-
optional :string, :
|
357
|
+
optional :string, :dispatch_message1, 12
|
358
|
+
optional :string, :dispatch_message2, 13
|
358
359
|
optional :int64, :occurrances, 14, :default => 1
|
359
360
|
optional :string, :group_by_key, 15
|
360
361
|
optional :string, :probe_id, 16
|
362
|
+
optional :string, :alert_status, 17
|
363
|
+
optional :int64, :acknowledge_flag, 18
|
361
364
|
end
|
362
365
|
|
363
366
|
class ResourceT
|
@@ -894,6 +897,7 @@ module TRP
|
|
894
897
|
optional :string, :filter_expression, 6
|
895
898
|
repeated :string, :merge_pcap_files, 7
|
896
899
|
optional :bool, :delete_after_merge, 8, :default => true
|
900
|
+
optional ::TRP::PcapFormat, :format, 9, :default => ::TRP::PcapFormat::LIBPCAP
|
897
901
|
end
|
898
902
|
|
899
903
|
class PcapResponse
|
data/lib/trisulrp/trp.proto
CHANGED
@@ -127,19 +127,21 @@ message AlertT{
|
|
127
127
|
optional int64 sensor_id=1;
|
128
128
|
required Timestamp time=2;
|
129
129
|
required string alert_id=3;
|
130
|
-
optional KeyT
|
131
|
-
optional KeyT
|
132
|
-
optional KeyT
|
133
|
-
optional KeyT
|
134
|
-
optional KeyT
|
135
|
-
optional KeyT
|
136
|
-
optional KeyT
|
130
|
+
optional KeyT source_ip=4;
|
131
|
+
optional KeyT source_port=5;
|
132
|
+
optional KeyT destination_ip=6;
|
133
|
+
optional KeyT destination_port=7;
|
134
|
+
optional KeyT sigid=8;
|
135
|
+
optional KeyT classification=9;
|
136
|
+
optional KeyT priority=10;
|
137
137
|
optional Timestamp dispatch_time=11;
|
138
|
-
optional string
|
139
|
-
optional string
|
138
|
+
optional string dispatch_message1=12;
|
139
|
+
optional string dispatch_message2=13;
|
140
140
|
optional int64 occurrances=14[default=1];
|
141
141
|
optional string group_by_key=15;
|
142
142
|
optional string probe_id=16;
|
143
|
+
optional string alert_status=17;
|
144
|
+
optional int64 acknowledge_flag=18;
|
143
145
|
}
|
144
146
|
|
145
147
|
|
@@ -192,6 +194,7 @@ enum CompressionType {
|
|
192
194
|
enum PcapFormat {
|
193
195
|
LIBPCAP=1;
|
194
196
|
UNSNIFF=2;
|
197
|
+
LIBPCAPNOFILEHEADER=3;
|
195
198
|
}
|
196
199
|
|
197
200
|
enum DomainNodeType
|
@@ -957,6 +960,7 @@ message PcapRequest {
|
|
957
960
|
optional string filter_expression=6;
|
958
961
|
repeated string merge_pcap_files=7;
|
959
962
|
optional bool delete_after_merge=8[default=true];
|
963
|
+
optional PcapFormat format=9[default=LIBPCAP];
|
960
964
|
}
|
961
965
|
|
962
966
|
|
data/trisulrp.gemspec
CHANGED
@@ -2,16 +2,16 @@
|
|
2
2
|
# DO NOT EDIT THIS FILE DIRECTLY
|
3
3
|
# Instead, edit Juwelier::Tasks in Rakefile, and run 'rake gemspec'
|
4
4
|
# -*- encoding: utf-8 -*-
|
5
|
-
# stub: trisulrp 3.1.
|
5
|
+
# stub: trisulrp 3.1.11 ruby lib
|
6
6
|
|
7
7
|
Gem::Specification.new do |s|
|
8
8
|
s.name = "trisulrp"
|
9
|
-
s.version = "3.1.
|
9
|
+
s.version = "3.1.11"
|
10
10
|
|
11
11
|
s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
|
12
12
|
s.require_paths = ["lib"]
|
13
13
|
s.authors = ["vivek"]
|
14
|
-
s.date = "2016-
|
14
|
+
s.date = "2016-12-23"
|
15
15
|
s.description = "This gem deals about the trisul remote protocol"
|
16
16
|
s.email = "vivek_rajagopal@yahoo.com"
|
17
17
|
s.extra_rdoc_files = [
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: trisulrp
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 3.1.
|
4
|
+
version: 3.1.11
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- vivek
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2016-
|
11
|
+
date: 2016-12-23 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: protobuf
|