trisulrp 3.1.8 → 3.1.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/VERSION +1 -1
- data/lib/trisulrp/protocol.rb +29 -0
- data/lib/trisulrp/trp.pb.rb +6 -2
- data/lib/trisulrp/trp.proto +13 -9
- data/trisulrp.gemspec +3 -3
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 8a80ac5c8d010546f72f43d0ca8fe943fab65efc
|
|
4
|
+
data.tar.gz: b2eb01d960d26429a6c335beeaa6c6ccf5099d26
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 7cbffac3de814341c645c485f0eef0d3c3bc70780b0da80c3300ce8e9b12e24754681786ec7cea54c16e55a217e9e35874970f3224496e07036dc0c4e99365b6
|
|
7
|
+
data.tar.gz: e822fac8f5a674ab084928f34aad57b7fdffb139e5c510bda678c050a2dfe00a44168abf985220f854c10df13548c75e320662c8a3b28dbd8aaaf3d12a70d166
|
data/VERSION
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
3.1.
|
|
1
|
+
3.1.11
|
data/lib/trisulrp/protocol.rb
CHANGED
|
@@ -237,6 +237,35 @@ module TrisulRP::Protocol
|
|
|
237
237
|
|
|
238
238
|
end
|
|
239
239
|
|
|
240
|
+
# used in Trisul Domain
|
|
241
|
+
# send trp_request as async, then poll for completion and return
|
|
242
|
+
# this does not block the domain network
|
|
243
|
+
#
|
|
244
|
+
def get_response_zmq_async(endpoint, trp_request, timeout_seconds = -1 )
|
|
245
|
+
|
|
246
|
+
# first get a resp.token ASYNC, then poll for it
|
|
247
|
+
trp_request.run_async=true
|
|
248
|
+
resp=get_response_zmq(endpoint, trp_request, timeout_seconds)
|
|
249
|
+
|
|
250
|
+
trp_resp_command_id = resp.instance_variable_get("@trp_resp_command_id")
|
|
251
|
+
|
|
252
|
+
while trp_resp_command_id == TRP::Message::Command::ASYNC_RESPONSE do
|
|
253
|
+
async_req = TrisulRP::Protocol.mk_request(
|
|
254
|
+
TRP::Message::Command::ASYNC_REQUEST,
|
|
255
|
+
{
|
|
256
|
+
token:resp.token,
|
|
257
|
+
destination_node:trp_request.destination_node,
|
|
258
|
+
sleep:2
|
|
259
|
+
}
|
|
260
|
+
)
|
|
261
|
+
resp=get_response_zmq(endpoint,async_req, timeout_seconds)
|
|
262
|
+
trp_resp_command_id = resp.instance_variable_get("@trp_resp_command_id")
|
|
263
|
+
end
|
|
264
|
+
|
|
265
|
+
return resp
|
|
266
|
+
|
|
267
|
+
end
|
|
268
|
+
|
|
240
269
|
|
|
241
270
|
|
|
242
271
|
# Query the total time window available in Trisul
|
data/lib/trisulrp/trp.pb.rb
CHANGED
|
@@ -25,6 +25,7 @@ module TRP
|
|
|
25
25
|
class PcapFormat < ::Protobuf::Enum
|
|
26
26
|
define :LIBPCAP, 1
|
|
27
27
|
define :UNSNIFF, 2
|
|
28
|
+
define :LIBPCAPNOFILEHEADER, 3
|
|
28
29
|
end
|
|
29
30
|
|
|
30
31
|
class DomainNodeType < ::Protobuf::Enum
|
|
@@ -353,11 +354,13 @@ module TRP
|
|
|
353
354
|
optional ::TRP::KeyT, :classification, 9
|
|
354
355
|
optional ::TRP::KeyT, :priority, 10
|
|
355
356
|
optional ::TRP::Timestamp, :dispatch_time, 11
|
|
356
|
-
optional :string, :
|
|
357
|
-
optional :string, :
|
|
357
|
+
optional :string, :dispatch_message1, 12
|
|
358
|
+
optional :string, :dispatch_message2, 13
|
|
358
359
|
optional :int64, :occurrances, 14, :default => 1
|
|
359
360
|
optional :string, :group_by_key, 15
|
|
360
361
|
optional :string, :probe_id, 16
|
|
362
|
+
optional :string, :alert_status, 17
|
|
363
|
+
optional :int64, :acknowledge_flag, 18
|
|
361
364
|
end
|
|
362
365
|
|
|
363
366
|
class ResourceT
|
|
@@ -894,6 +897,7 @@ module TRP
|
|
|
894
897
|
optional :string, :filter_expression, 6
|
|
895
898
|
repeated :string, :merge_pcap_files, 7
|
|
896
899
|
optional :bool, :delete_after_merge, 8, :default => true
|
|
900
|
+
optional ::TRP::PcapFormat, :format, 9, :default => ::TRP::PcapFormat::LIBPCAP
|
|
897
901
|
end
|
|
898
902
|
|
|
899
903
|
class PcapResponse
|
data/lib/trisulrp/trp.proto
CHANGED
|
@@ -127,19 +127,21 @@ message AlertT{
|
|
|
127
127
|
optional int64 sensor_id=1;
|
|
128
128
|
required Timestamp time=2;
|
|
129
129
|
required string alert_id=3;
|
|
130
|
-
optional KeyT
|
|
131
|
-
optional KeyT
|
|
132
|
-
optional KeyT
|
|
133
|
-
optional KeyT
|
|
134
|
-
optional KeyT
|
|
135
|
-
optional KeyT
|
|
136
|
-
optional KeyT
|
|
130
|
+
optional KeyT source_ip=4;
|
|
131
|
+
optional KeyT source_port=5;
|
|
132
|
+
optional KeyT destination_ip=6;
|
|
133
|
+
optional KeyT destination_port=7;
|
|
134
|
+
optional KeyT sigid=8;
|
|
135
|
+
optional KeyT classification=9;
|
|
136
|
+
optional KeyT priority=10;
|
|
137
137
|
optional Timestamp dispatch_time=11;
|
|
138
|
-
optional string
|
|
139
|
-
optional string
|
|
138
|
+
optional string dispatch_message1=12;
|
|
139
|
+
optional string dispatch_message2=13;
|
|
140
140
|
optional int64 occurrances=14[default=1];
|
|
141
141
|
optional string group_by_key=15;
|
|
142
142
|
optional string probe_id=16;
|
|
143
|
+
optional string alert_status=17;
|
|
144
|
+
optional int64 acknowledge_flag=18;
|
|
143
145
|
}
|
|
144
146
|
|
|
145
147
|
|
|
@@ -192,6 +194,7 @@ enum CompressionType {
|
|
|
192
194
|
enum PcapFormat {
|
|
193
195
|
LIBPCAP=1;
|
|
194
196
|
UNSNIFF=2;
|
|
197
|
+
LIBPCAPNOFILEHEADER=3;
|
|
195
198
|
}
|
|
196
199
|
|
|
197
200
|
enum DomainNodeType
|
|
@@ -957,6 +960,7 @@ message PcapRequest {
|
|
|
957
960
|
optional string filter_expression=6;
|
|
958
961
|
repeated string merge_pcap_files=7;
|
|
959
962
|
optional bool delete_after_merge=8[default=true];
|
|
963
|
+
optional PcapFormat format=9[default=LIBPCAP];
|
|
960
964
|
}
|
|
961
965
|
|
|
962
966
|
|
data/trisulrp.gemspec
CHANGED
|
@@ -2,16 +2,16 @@
|
|
|
2
2
|
# DO NOT EDIT THIS FILE DIRECTLY
|
|
3
3
|
# Instead, edit Juwelier::Tasks in Rakefile, and run 'rake gemspec'
|
|
4
4
|
# -*- encoding: utf-8 -*-
|
|
5
|
-
# stub: trisulrp 3.1.
|
|
5
|
+
# stub: trisulrp 3.1.11 ruby lib
|
|
6
6
|
|
|
7
7
|
Gem::Specification.new do |s|
|
|
8
8
|
s.name = "trisulrp"
|
|
9
|
-
s.version = "3.1.
|
|
9
|
+
s.version = "3.1.11"
|
|
10
10
|
|
|
11
11
|
s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
|
|
12
12
|
s.require_paths = ["lib"]
|
|
13
13
|
s.authors = ["vivek"]
|
|
14
|
-
s.date = "2016-
|
|
14
|
+
s.date = "2016-12-23"
|
|
15
15
|
s.description = "This gem deals about the trisul remote protocol"
|
|
16
16
|
s.email = "vivek_rajagopal@yahoo.com"
|
|
17
17
|
s.extra_rdoc_files = [
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: trisulrp
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 3.1.
|
|
4
|
+
version: 3.1.11
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- vivek
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2016-
|
|
11
|
+
date: 2016-12-23 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: protobuf
|