unified2 0.4.0 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (44) hide show
  1. data/ChangeLog.rdoc +6 -0
  2. data/LICENSE.txt +1 -1
  3. data/README.md +72 -0
  4. data/example/{basic-example.rb → example.rb} +3 -2
  5. data/example/seeds/{unified2 → unified2.log} +0 -0
  6. data/gemspec.yml +2 -0
  7. data/lib/unified2/classification.rb +17 -3
  8. data/lib/unified2/config_file.rb +34 -10
  9. data/lib/unified2/constructor/construct.rb +83 -0
  10. data/lib/unified2/constructor/event_ip4.rb +47 -0
  11. data/lib/unified2/constructor/event_ip6.rb +44 -0
  12. data/lib/unified2/constructor/packet.rb +30 -0
  13. data/lib/unified2/constructor/primitive/ipv4.rb +31 -0
  14. data/lib/unified2/{primitive.rb → constructor/primitive.rb} +0 -0
  15. data/lib/unified2/constructor/record_header.rb +17 -0
  16. data/lib/unified2/constructor.rb +1 -0
  17. data/lib/unified2/core_ext/string.rb +10 -2
  18. data/lib/unified2/event.rb +250 -100
  19. data/lib/unified2/exceptions/file_not_found.rb +6 -3
  20. data/lib/unified2/exceptions/file_not_readable.rb +6 -3
  21. data/lib/unified2/exceptions/unknown_load_type.rb +6 -3
  22. data/lib/unified2/payload.rb +82 -13
  23. data/lib/unified2/protocol.rb +141 -0
  24. data/lib/unified2/sensor.rb +22 -0
  25. data/lib/unified2/signature.rb +28 -4
  26. data/lib/unified2/version.rb +2 -2
  27. data/lib/unified2.rb +84 -13
  28. data/spec/event_spec.rb +112 -0
  29. data/spec/spec_helper.rb +45 -1
  30. data/spec/unified2_spec.rb +87 -1
  31. metadata +45 -25
  32. data/README.rdoc +0 -60
  33. data/Rakefile.compiled.rbc +0 -775
  34. data/example/connect.rb +0 -20
  35. data/example/models.rb +0 -194
  36. data/example/mysql-example.rb +0 -73
  37. data/example/search.rb +0 -14
  38. data/example/untitled.rb +0 -31
  39. data/lib/unified2/construct.rb +0 -54
  40. data/lib/unified2/event_ip4.rb +0 -26
  41. data/lib/unified2/event_ip6.rb +0 -23
  42. data/lib/unified2/packet.rb +0 -16
  43. data/lib/unified2/primitive/ipv4.rb +0 -19
  44. data/lib/unified2/record_header.rb +0 -10
@@ -1,775 +0,0 @@
1
- !RBIX
2
- 0
3
- x
4
- M
5
- 1
6
- n
7
- n
8
- x
9
- 10
10
- __script__
11
- i
12
- 402
13
- 5
14
- 7
15
- 0
16
- 64
17
- 47
18
- 49
19
- 1
20
- 1
21
- 15
22
- 5
23
- 7
24
- 2
25
- 64
26
- 47
27
- 49
28
- 1
29
- 1
30
- 15
31
- 26
32
- 93
33
- 0
34
- 15
35
- 29
36
- 75
37
- 0
38
- 5
39
- 7
40
- 3
41
- 64
42
- 7
43
- 4
44
- 64
45
- 47
46
- 49
47
- 5
48
- 2
49
- 15
50
- 5
51
- 7
52
- 6
53
- 64
54
- 47
55
- 49
56
- 1
57
- 1
58
- 15
59
- 45
60
- 7
61
- 8
62
- 43
63
- 9
64
- 13
65
- 71
66
- 10
67
- 47
68
- 9
69
- 69
70
- 47
71
- 49
72
- 11
73
- 0
74
- 13
75
- 47
76
- 49
77
- 12
78
- 0
79
- 15
80
- 8
81
- 72
82
- 49
83
- 10
84
- 0
85
- 30
86
- 8
87
- 126
88
- 26
89
- 93
90
- 1
91
- 15
92
- 24
93
- 13
94
- 45
95
- 13
96
- 14
97
- 12
98
- 49
99
- 15
100
- 1
101
- 10
102
- 92
103
- 8
104
- 121
105
- 15
106
- 24
107
- 19
108
- 0
109
- 15
110
- 45
111
- 16
112
- 17
113
- 20
114
- 0
115
- 49
116
- 18
117
- 0
118
- 49
119
- 19
120
- 1
121
- 15
122
- 45
123
- 16
124
- 20
125
- 7
126
- 21
127
- 64
128
- 49
129
- 19
130
- 1
131
- 25
132
- 8
133
- 126
134
- 15
135
- 92
136
- 1
137
- 27
138
- 34
139
- 92
140
- 0
141
- 27
142
- 15
143
- 26
144
- 93
145
- 2
146
- 15
147
- 29
148
- 189
149
- 0
150
- 5
151
- 7
152
- 22
153
- 64
154
- 7
155
- 23
156
- 64
157
- 47
158
- 49
159
- 5
160
- 2
161
- 15
162
- 5
163
- 7
164
- 24
165
- 64
166
- 47
167
- 49
168
- 1
169
- 1
170
- 15
171
- 45
172
- 25
173
- 26
174
- 43
175
- 27
176
- 43
177
- 28
178
- 13
179
- 71
180
- 10
181
- 47
182
- 9
183
- 183
184
- 47
185
- 49
186
- 11
187
- 0
188
- 13
189
- 47
190
- 49
191
- 12
192
- 0
193
- 15
194
- 8
195
- 186
196
- 49
197
- 10
198
- 0
199
- 30
200
- 8
201
- 228
202
- 26
203
- 93
204
- 3
205
- 15
206
- 24
207
- 13
208
- 45
209
- 13
210
- 29
211
- 12
212
- 49
213
- 15
214
- 1
215
- 10
216
- 206
217
- 8
218
- 223
219
- 15
220
- 24
221
- 19
222
- 0
223
- 15
224
- 5
225
- 7
226
- 30
227
- 56
228
- 31
229
- 47
230
- 50
231
- 32
232
- 1
233
- 25
234
- 8
235
- 228
236
- 15
237
- 92
238
- 3
239
- 27
240
- 34
241
- 92
242
- 2
243
- 27
244
- 15
245
- 5
246
- 44
247
- 43
248
- 33
249
- 79
250
- 49
251
- 34
252
- 1
253
- 13
254
- 7
255
- 35
256
- 7
257
- 30
258
- 49
259
- 36
260
- 2
261
- 15
262
- 47
263
- 49
264
- 32
265
- 1
266
- 15
267
- 5
268
- 44
269
- 43
270
- 33
271
- 79
272
- 49
273
- 34
274
- 1
275
- 13
276
- 7
277
- 37
278
- 7
279
- 30
280
- 49
281
- 36
282
- 2
283
- 15
284
- 47
285
- 49
286
- 32
287
- 1
288
- 15
289
- 26
290
- 93
291
- 4
292
- 15
293
- 29
294
- 335
295
- 0
296
- 5
297
- 7
298
- 38
299
- 64
300
- 7
301
- 39
302
- 64
303
- 47
304
- 49
305
- 5
306
- 2
307
- 15
308
- 5
309
- 7
310
- 38
311
- 64
312
- 47
313
- 49
314
- 1
315
- 1
316
- 15
317
- 45
318
- 40
319
- 41
320
- 43
321
- 42
322
- 43
323
- 43
324
- 13
325
- 71
326
- 10
327
- 47
328
- 9
329
- 329
330
- 47
331
- 49
332
- 11
333
- 0
334
- 13
335
- 47
336
- 49
337
- 12
338
- 0
339
- 15
340
- 8
341
- 332
342
- 49
343
- 10
344
- 0
345
- 30
346
- 8
347
- 374
348
- 26
349
- 93
350
- 5
351
- 15
352
- 24
353
- 13
354
- 45
355
- 13
356
- 44
357
- 12
358
- 49
359
- 15
360
- 1
361
- 10
362
- 352
363
- 8
364
- 369
365
- 15
366
- 24
367
- 19
368
- 0
369
- 15
370
- 5
371
- 7
372
- 45
373
- 56
374
- 46
375
- 47
376
- 50
377
- 32
378
- 1
379
- 25
380
- 8
381
- 374
382
- 15
383
- 92
384
- 5
385
- 27
386
- 34
387
- 92
388
- 4
389
- 27
390
- 15
391
- 5
392
- 44
393
- 43
394
- 33
395
- 79
396
- 49
397
- 34
398
- 1
399
- 13
400
- 7
401
- 47
402
- 7
403
- 45
404
- 49
405
- 36
406
- 2
407
- 15
408
- 47
409
- 49
410
- 32
411
- 1
412
- 15
413
- 2
414
- 11
415
- I
416
- c
417
- I
418
- 1
419
- I
420
- 0
421
- I
422
- 0
423
- n
424
- p
425
- 48
426
- s
427
- 8
428
- rubygems
429
- x
430
- 7
431
- require
432
- s
433
- 4
434
- rake
435
- s
436
- 9
437
- ore-tasks
438
- s
439
- 8
440
- ~> 0.5.0
441
- x
442
- 3
443
- gem
444
- s
445
- 9
446
- ore/tasks
447
- x
448
- 3
449
- Ore
450
- n
451
- x
452
- 5
453
- Tasks
454
- x
455
- 3
456
- new
457
- x
458
- 8
459
- allocate
460
- x
461
- 10
462
- initialize
463
- x
464
- 9
465
- LoadError
466
- n
467
- x
468
- 3
469
- ===
470
- x
471
- 6
472
- STDERR
473
- n
474
- x
475
- 7
476
- message
477
- x
478
- 4
479
- puts
480
- n
481
- s
482
- 51
483
- Run `gem install ore-tasks` to install 'ore/tasks'.
484
- s
485
- 5
486
- rspec
487
- s
488
- 6
489
- ~> 2.4
490
- s
491
- 20
492
- rspec/core/rake_task
493
- x
494
- 5
495
- RSpec
496
- n
497
- x
498
- 4
499
- Core
500
- x
501
- 8
502
- RakeTask
503
- n
504
- x
505
- 4
506
- spec
507
- M
508
- 1
509
- p
510
- 2
511
- x
512
- 9
513
- for_block
514
- t
515
- n
516
- x
517
- 9
518
- __block__
519
- i
520
- 9
521
- 5
522
- 7
523
- 0
524
- 64
525
- 47
526
- 49
527
- 1
528
- 1
529
- 11
530
- I
531
- 3
532
- I
533
- 0
534
- I
535
- 0
536
- I
537
- 0
538
- I
539
- -2
540
- p
541
- 2
542
- s
543
- 48
544
- Please run `gem install rspec` to install RSpec.
545
- x
546
- 5
547
- abort
548
- p
549
- 3
550
- I
551
- 0
552
- I
553
- 15
554
- I
555
- 9
556
- x
557
- 49
558
- /Users/dustinwebber/source/ruby/unified2/Rakefile
559
- p
560
- 0
561
- x
562
- 4
563
- task
564
- x
565
- 4
566
- Hash
567
- x
568
- 16
569
- new_from_literal
570
- x
571
- 4
572
- test
573
- x
574
- 3
575
- []=
576
- x
577
- 7
578
- default
579
- s
580
- 4
581
- yard
582
- s
583
- 8
584
- ~> 0.6.0
585
- x
586
- 4
587
- YARD
588
- n
589
- x
590
- 4
591
- Rake
592
- x
593
- 10
594
- YardocTask
595
- n
596
- x
597
- 4
598
- yard
599
- M
600
- 1
601
- p
602
- 2
603
- x
604
- 9
605
- for_block
606
- t
607
- n
608
- x
609
- 9
610
- __block__
611
- i
612
- 9
613
- 5
614
- 7
615
- 0
616
- 64
617
- 47
618
- 49
619
- 1
620
- 1
621
- 11
622
- I
623
- 3
624
- I
625
- 0
626
- I
627
- 0
628
- I
629
- 0
630
- I
631
- -2
632
- p
633
- 2
634
- s
635
- 46
636
- Please run `gem install yard` to install YARD.
637
- x
638
- 5
639
- abort
640
- p
641
- 3
642
- I
643
- 0
644
- I
645
- 23
646
- I
647
- 9
648
- x
649
- 49
650
- /Users/dustinwebber/source/ruby/unified2/Rakefile
651
- p
652
- 0
653
- x
654
- 3
655
- doc
656
- p
657
- 55
658
- I
659
- 0
660
- I
661
- 1
662
- I
663
- 9
664
- I
665
- 2
666
- I
667
- 12
668
- I
669
- 5
670
- I
671
- 25
672
- I
673
- 6
674
- I
675
- 2e
676
- I
677
- 8
678
- I
679
- 50
680
- I
681
- 9
682
- I
683
- 5d
684
- I
685
- c
686
- I
687
- 5e
688
- I
689
- 9
690
- I
691
- 61
692
- I
693
- a
694
- I
695
- 6d
696
- I
697
- b
698
- I
699
- 82
700
- I
701
- f
702
- I
703
- 95
704
- I
705
- 10
706
- I
707
- 9e
708
- I
709
- 12
710
- I
711
- c2
712
- I
713
- 13
714
- I
715
- cf
716
- I
717
- 17
718
- I
719
- d0
720
- I
721
- 13
722
- I
723
- d3
724
- I
725
- 14
726
- I
727
- e8
728
- I
729
- 19
730
- I
731
- fe
732
- I
733
- 1a
734
- I
735
- 114
736
- I
737
- 1d
738
- I
739
- 127
740
- I
741
- 1e
742
- I
743
- 130
744
- I
745
- 20
746
- I
747
- 154
748
- I
749
- 21
750
- I
751
- 161
752
- I
753
- 25
754
- I
755
- 162
756
- I
757
- 21
758
- I
759
- 165
760
- I
761
- 22
762
- I
763
- 17a
764
- I
765
- 27
766
- I
767
- 192
768
- x
769
- 49
770
- /Users/dustinwebber/source/ruby/unified2/Rakefile
771
- p
772
- 1
773
- x
774
- 1
775
- e