bsc::ui::anonymous_namespace{UIClient.cpp} Namespace Reference

Functions
void	connection_to_json (const bsc::model::Connection &c, json &j)
bsc::rule::OperatorType	op_type_from_string (const std::string &s)
bsc::rule::Operator	operator_from_json (const json &j)
bsc::rule::Rule	rule_from_json (const json &j)

Function Documentation

connection_to_json()

void bsc::ui::anonymous_namespace{UIClient.cpp}::connection_to_json	(	const bsc::model::Connection &	c,
		json &	j )

Definition at line 34 of file UIClient.cpp.

                                                              {
    j["protocol"]     = c.protocol;
    j["src_ip"]       = c.src_ip;
    j["src_port"]     = c.src_port;
    j["dst_ip"]       = c.dst_ip;
    j["dst_host"]     = c.dst_host;
    j["dst_port"]     = c.dst_port;
    j["user_id"]      = c.user_id;
    j["process_id"]   = c.process_id;
    j["process_path"] = c.process_path;
    j["process_comm"] = c.process_comm;
    j["process_cwd"]  = c.process_cwd;
    j["process_args"] = c.process_args;
    j["process_env"]  = c.process_env;
    j["process_checksums"] = c.process_checksums;
    json tree = json::array();
    for (const auto& [name, pid] : c.process_tree) {
        tree.push_back({{"name", name}, {"pid", pid}});
    }
    j["process_tree"] = std::move(tree);
}

References connection_to_json(), bsc::model::Connection::dst_host, bsc::model::Connection::dst_ip, bsc::model::Connection::dst_port, bsc::model::Connection::process_args, bsc::model::Connection::process_checksums, bsc::model::Connection::process_comm, bsc::model::Connection::process_cwd, bsc::model::Connection::process_env, bsc::model::Connection::process_id, bsc::model::Connection::process_path, bsc::model::Connection::process_tree, bsc::model::Connection::protocol, bsc::model::Connection::src_ip, bsc::model::Connection::src_port, and bsc::model::Connection::user_id.

Referenced by connection_to_json().

op_type_from_string()

bsc::rule::OperatorType bsc::ui::anonymous_namespace{UIClient.cpp}::op_type_from_string

(

const std::string &

s

)

Definition at line 57 of file UIClient.cpp.

                                                            {
    if (s == "simple")  return bsc::rule::OperatorType::Simple;
    if (s == "regexp")  return bsc::rule::OperatorType::Regexp;
    if (s == "network") return bsc::rule::OperatorType::Network;
    if (s == "range")   return bsc::rule::OperatorType::Range;
    if (s == "list")    return bsc::rule::OperatorType::List;
    if (s == "lists")   return bsc::rule::OperatorType::Lists;
    return bsc::rule::OperatorType::Unknown;
}

References bsc::rule::List, bsc::rule::Lists, bsc::rule::Network, op_type_from_string(), bsc::rule::Range, bsc::rule::Regexp, bsc::rule::Simple, and bsc::rule::Unknown.

Referenced by op_type_from_string(), and operator_from_json().

operator_from_json()

bsc::rule::Operator bsc::ui::anonymous_namespace{UIClient.cpp}::operator_from_json

(

const json &

j

)

Definition at line 67 of file UIClient.cpp.

                                                  {
    bsc::rule::Operator op;
    op.type    = op_type_from_string(j.value("type", std::string{"simple"}));
    op.operand = j.value("operand", std::string{});
    op.data    = j.value("data", std::string{});
    op.sensitive = j.value("sensitive", false);
    if (j.contains("list") && j["list"].is_array()) {
        for (const auto& item : j["list"]) op.list.push_back(operator_from_json(item));
    }
    return op;
}

References bsc::rule::Operator::data, bsc::rule::Operator::list, op_type_from_string(), bsc::rule::Operator::operand, operator_from_json(), bsc::rule::Operator::sensitive, and bsc::rule::Operator::type.

Referenced by operator_from_json(), and rule_from_json().

rule_from_json()

bsc::rule::Rule bsc::ui::anonymous_namespace{UIClient.cpp}::rule_from_json

(

const json &

j

)

Definition at line 79 of file UIClient.cpp.

                                          {
    bsc::rule::Rule r;
    r.created     = j.value("created", std::int64_t{0});
    r.name        = j.value("name", std::string{});
    r.description = j.value("description", std::string{});
    r.enabled     = j.value("enabled", true);
    r.precedence  = j.value("precedence", false);
    r.nolog       = j.value("nolog", false);
    r.action      = j.value("action", std::string{"allow"});
    r.duration    = j.value("duration", std::string{"once"});
    if (j.contains("operator") && j["operator"].is_object()) {
        r.op = operator_from_json(j["operator"]);
    }
    return r;
}

References operator_from_json(), and rule_from_json().

Referenced by rule_from_json().