class Razorback::Response
Public Class Methods
new()
click to toggle source
# File lib/razorback.rb, line 23 def initialize() @preamble = 0 @alert_preamble = 0 end
Public Instance Methods
alertData(type,data)
click to toggle source
# File lib/razorback.rb, line 62 def alertData(type,data) if @alert_preamble == 0 puts "FATAL: Failed to start alert XML" exit end puts "\t\t\t\t<entry>" puts "\t\t\t\t\t<type>#{type}</type>" puts "\t\t\t\t\t<data>#{data}</data>" puts "\t\t\t\t</entry>" end
alertEnd()
click to toggle source
# File lib/razorback.rb, line 72 def alertEnd() puts "\t\t\t</metadata>" puts "\t\t</verdict>" @alert_preamble = 0 end
alertStart(severity, gid, sid, message, sf_flags, sf_unset, ent_flags, ent_unset)
click to toggle source
# File lib/razorback.rb, line 42 def alertStart(severity, gid, sid, message, sf_flags, sf_unset, ent_flags, ent_unset) if @preamble == 0 puts "FATAL: Failed to start response XML" exit end @alert_preamble = 1 puts "\t\t<verdict priority=\"#{severity}\" gid=\"#{gid}\" sid=\"#{sid}\">" puts "\t\t\t<flags>" puts "\t\t\t\t<sourcefire>" puts "\t\t\t\t\t<set>#{sf_flags}</set>" puts "\t\t\t\t\t<unset>#{sf_unset}</unset>" puts "\t\t\t\t</sourcefire>" puts "\t\t\t\t<enterprise>" puts "\t\t\t\t\t<set>#{ent_flags}</set>" puts "\t\t\t\t\t<unset>#{ent_unset}</unset>" puts "\t\t\t\t</enterprise>" puts "\t\t\t</flags>" puts "\t\t\t<message>#{message}</message>" puts "\t\t\t<metadata>" end
end()
click to toggle source
# File lib/razorback.rb, line 77 def end() puts "\t</response>" puts "</razorback>" @preamble = 0 end
log(severity, message)
click to toggle source
# File lib/razorback.rb, line 33 def log(severity, message) if @preamble == 0 puts "FATAL: Failed to start response" exit end puts "\t\t<log level=\"#{severity}\">" puts "\t\t\t<message>#{message}</message>" puts "\t\t</log>" end
start()
click to toggle source
# File lib/razorback.rb, line 27 def start() puts "<?xml version=\"1.0\"?>" puts "<razorback>" puts "\t<response>" @preamble = 1 end