Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
W
Warden - archive
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Wiki
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Snippets
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Releases
Package registry
Container Registry
Model registry
Operate
Environments
Terraform modules
Monitor
Incidents
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Terms and privacy
Keyboard shortcuts
?
Snippets
Groups
Projects
This is an archived project. Repository and other project resources are read-only.
Show more breadcrumbs
713
Warden
Warden - archive
Commits
57c407e3
Commit
57c407e3
authored
12 years ago
by
Jan Soukal
Browse files
Options
Downloads
Patches
Plain Diff
doplnena funkcionalita logovani a backtracingu.
parent
a2fe1079
No related branches found
No related tags found
No related merge requests found
Changes
2
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
src/warden-client/lib/WardenClientReceive.pm
+7
-17
7 additions, 17 deletions
src/warden-client/lib/WardenClientReceive.pm
src/warden-client/lib/WardenClientSend.pm
+50
-29
50 additions, 29 deletions
src/warden-client/lib/WardenClientSend.pm
with
57 additions
and
46 deletions
src/warden-client/lib/WardenClientReceive.pm
+
7
−
17
View file @
57c407e3
...
@@ -18,7 +18,7 @@ use Sys::Syslog;
...
@@ -18,7 +18,7 @@ use Sys::Syslog;
our
$VERSION
=
"
2.0
";
our
$VERSION
=
"
2.0
";
#----- global configuration variables -
-----------------------
-----------------
#----- global configuration variables -
default initialization
-----------------
our
$LOG_STDERR
=
1
;
our
$LOG_STDERR
=
1
;
our
$LOG_SYSLOG
=
0
;
our
$LOG_SYSLOG
=
0
;
...
@@ -87,9 +87,6 @@ sub c2s
...
@@ -87,9 +87,6 @@ sub c2s
# deserialized response from server -> create SOAP envelope and data object
# deserialized response from server -> create SOAP envelope and data object
my
$response
;
my
$response
;
# test
errMsg
("
test error in c2s()
");
eval
{
eval
{
$response
=
$soap
->
deserializer
->
deserialize
(
$result
);
$response
=
$soap
->
deserializer
->
deserialize
(
$result
);
}
or
errMsg
(
$@
.
"
Received data:
"
.
$result
);
}
or
errMsg
(
$@
.
"
Received data:
"
.
$result
);
...
@@ -121,9 +118,6 @@ sub getNewEvents
...
@@ -121,9 +118,6 @@ sub getNewEvents
my
(
$uri
,
$ssl_key_file
,
$ssl_cert_file
,
$ssl_ca_file
,
$max_rcv_events_limit
);
my
(
$uri
,
$ssl_key_file
,
$ssl_cert_file
,
$ssl_ca_file
,
$max_rcv_events_limit
);
(
$uri
,
$ssl_key_file
,
$ssl_cert_file
,
$ssl_ca_file
,
$max_rcv_events_limit
,
$LOG_STDERR
,
$LOG_SYSLOG
,
$LOG_SYSLOG_FACILITY
,
$LOG_VERBOSE
)
=
WardenClientConf::
loadConf
(
$conf_file
);
(
$uri
,
$ssl_key_file
,
$ssl_cert_file
,
$ssl_ca_file
,
$max_rcv_events_limit
,
$LOG_STDERR
,
$LOG_SYSLOG
,
$LOG_SYSLOG_FACILITY
,
$LOG_VERBOSE
)
=
WardenClientConf::
loadConf
(
$conf_file
);
# test
# errMsg("testovaci error\n");
# set name of ID file for each client aplication
# set name of ID file for each client aplication
my
$caller_name
=
$
FindBin::
Script
;
my
$caller_name
=
$
FindBin::
Script
;
my
$id_file
=
$vardir
.
$caller_name
.
"
.id
";
my
$id_file
=
$vardir
.
$caller_name
.
"
.id
";
...
@@ -141,7 +135,7 @@ sub getNewEvents
...
@@ -141,7 +135,7 @@ sub getNewEvents
}
else
{
}
else
{
my
$response
=
c2s
(
$uri
,
$ssl_key_file
,
$ssl_cert_file
,
$ssl_ca_file
,
"
getLastId
");
my
$response
=
c2s
(
$uri
,
$ssl_key_file
,
$ssl_cert_file
,
$ssl_ca_file
,
"
getLastId
");
$last_id
=
$response
->
result
;
$last_id
=
$response
->
result
;
open
(
ID
,
"
>
$id_file
")
||
die
("
Cannot open ID file
$id_file
: $!
");
open
(
ID
,
"
>
$id_file
")
||
errMsg
("
Cannot open ID file
$id_file
: $!
");
print
ID
$last_id
;
print
ID
$last_id
;
close
ID
;
close
ID
;
}
}
...
@@ -163,7 +157,6 @@ sub getNewEvents
...
@@ -163,7 +157,6 @@ sub getNewEvents
# parse returned SOAP data object
# parse returned SOAP data object
my
(
$id
,
$hostname
,
$service
,
$detected
,
$type
,
$source_type
,
$source
,
$target_proto
,
$target_port
,
$attack_scale
,
$note
,
$priority
,
$timeout
);
my
(
$id
,
$hostname
,
$service
,
$detected
,
$type
,
$source_type
,
$source
,
$target_proto
,
$target_port
,
$attack_scale
,
$note
,
$priority
,
$timeout
);
# my @events;
my
@response_list
=
$response
->
valueof
('
/Envelope/Body/getNewEventsResponse/event/
');
my
@response_list
=
$response
->
valueof
('
/Envelope/Body/getNewEventsResponse/event/
');
while
(
scalar
@response_list
)
{
while
(
scalar
@response_list
)
{
my
$response_data
=
shift
(
@response_list
);
my
$response_data
=
shift
(
@response_list
);
...
@@ -196,7 +189,7 @@ sub getNewEvents
...
@@ -196,7 +189,7 @@ sub getNewEvents
# write last return ID
# write last return ID
if
(
defined
$last_id
)
{
# must be defined for first check ID
if
(
defined
$last_id
)
{
# must be defined for first check ID
open
(
ID
,
"
>
$id_file
")
||
die
("
Cannot open ID file
$id_file
: $!
");
open
(
ID
,
"
>
$id_file
")
||
errMsg
("
Cannot open ID file
$id_file
: $!
");
print
ID
$last_id
;
print
ID
$last_id
;
close
ID
;
close
ID
;
}
}
...
@@ -204,16 +197,13 @@ sub getNewEvents
...
@@ -204,16 +197,13 @@ sub getNewEvents
or
do
{
or
do
{
if
(
$LOG_STDERR
)
{
if
(
$LOG_STDERR
)
{
print
STDERR
"
(STDERR)
Warden-client unexpected end in eval block.
\n
"
.
$@
.
"
\n
";
print
STDERR
"
Warden-client unexpected end in eval block.
\n
"
.
$@
.
"
\n
";
}
}
if
(
$LOG_SYSLOG
)
{
if
(
$LOG_SYSLOG
)
{
#TODO: zapis do syslogu, ne STDERR
openlog
("
Warden:
",
"
pid
",
"
$LOG_SYSLOG_FACILITY
");
print
STDERR
"
(SYSLOG)Warden-client unexpected end in eval block.
\n
"
.
$@
.
"
\n
";
syslog
("
err|
$LOG_SYSLOG_FACILITY
",
"
Warden-client unexpected end in eval block.
\n
"
.
$@
.
"
\n
");
closelog
();
# openlog("Warden:", "pid", "$LOG_SYSLOG_FACILITY");
# syslog("err|$LOG_SYSLOG_FACILITY", "Warden-client unexpected end in eval block.\n" . $@ . "\n");
# closelog();
}
}
return
;
return
;
};
};
...
...
This diff is collapsed.
Click to expand it.
src/warden-client/lib/WardenClientSend.pm
+
50
−
29
View file @
57c407e3
...
@@ -12,16 +12,31 @@ use strict;
...
@@ -12,16 +12,31 @@ use strict;
use
SOAP::
Lite
;
use
SOAP::
Lite
;
use
IO::Socket::
SSL
qw(debug1)
;
use
IO::Socket::
SSL
qw(debug1)
;
use
SOAP::Transport::
HTTP
;
use
SOAP::Transport::
HTTP
;
use
Carp
;
use
Sys::
Syslog
;
our
$VERSION
=
"
2.0
";
our
$VERSION
=
"
2.0
";
#first iteration after 'port to Apache'
#----- global configuration variables - default initialization -----------------
our
$LOG_STDERR
=
1
;
our
$LOG_SYSLOG
=
0
;
our
$LOG_SYSLOG_FACILITY
;
our
$LOG_VERBOSE
=
0
;
#----- end of configuration variables ------------------------------------------
#-------------------------------------------------------------------------------
#-------------------------------------------------------------------------------
# errMsg - print error message and die
# errMsg - print error message and die
#-------------------------------------------------------------------------------
#-------------------------------------------------------------------------------
sub
errMsg
sub
errMsg
{
{
my
$msg
=
shift
;
my
$msg
=
"
Error message:
"
.
shift
;
if
(
$LOG_VERBOSE
)
{
# user wants to log debug information
$msg
.=
"
\n
Stack info:
"
.
Carp::
longmess
();
}
die
(
$msg
.
"
\n
");
die
(
$msg
.
"
\n
");
}
# End of errMsg
}
# End of errMsg
...
@@ -31,12 +46,12 @@ sub errMsg
...
@@ -31,12 +46,12 @@ sub errMsg
#-------------------------------------------------------------------------------
#-------------------------------------------------------------------------------
sub
c2s
sub
c2s
{
{
my
$uri
=
shift
;
my
$uri
=
shift
;
my
$ssl_key_file
=
shift
;
my
$ssl_key_file
=
shift
;
my
$ssl_cert_file
=
shift
;
my
$ssl_cert_file
=
shift
;
my
$ssl_ca_file
=
shift
;
my
$ssl_ca_file
=
shift
;
my
$method
=
shift
;
my
$method
=
shift
;
my
$data
=
shift
;
my
$data
=
shift
;
my
(
$server
,
$port
,
$service
)
=
$uri
=~
/https:\/\/(.+)\:(\d+)\/(.+)/
;
my
(
$server
,
$port
,
$service
)
=
$uri
=~
/https:\/\/(.+)\:(\d+)\/(.+)/
;
...
@@ -44,7 +59,7 @@ sub c2s
...
@@ -44,7 +59,7 @@ sub c2s
if
(
!
(
$client
=
SOAP::Transport::HTTP::
Client
->
new
()))
{
if
(
!
(
$client
=
SOAP::Transport::HTTP::
Client
->
new
()))
{
errMsg
("
Sorry, unable to create socket:
"
.
&
SOAP::Transport::HTTP::Client::
errstr
)
errMsg
("
Sorry, unable to create socket:
"
.
&
SOAP::Transport::HTTP::Client::
errstr
)
}
}
$client
->
timeout
(
1
0
);
$client
->
timeout
(
6
0
);
$client
->
ssl_opts
(
verify_hostname
=>
1
,
$client
->
ssl_opts
(
verify_hostname
=>
1
,
SSL_use_cert
=>
1
,
SSL_use_cert
=>
1
,
SSL_verify_mode
=>
0x02
,
SSL_verify_mode
=>
0x02
,
...
@@ -67,10 +82,7 @@ sub c2s
...
@@ -67,10 +82,7 @@ sub c2s
errMsg
("
Error: server returned empty response.
"
.
"
\n
"
.
"
Problem with used SSL ceritificates or Warden server at
$server
:
$port
is down.
");
errMsg
("
Error: server returned empty response.
"
.
"
\n
"
.
"
Problem with used SSL ceritificates or Warden server at
$server
:
$port
is down.
");
}
else
{
}
else
{
# deserialized response from server -> create SOAP envelope and data object
# deserialized response from server -> create SOAP envelope and data object
my
$response
;
my
$response
=
$soap
->
deserializer
->
deserialize
(
$result
);
eval
{
$response
=
$soap
->
deserializer
->
deserialize
(
$result
);
}
or
errMsg
(
$@
.
"
Received data:
"
.
$result
);
# check SOAP fault status
# check SOAP fault status
$response
->
fault
?
errMsg
("
Server sent error message::
"
.
$response
->
faultstring
)
:
return
1
;
$response
->
fault
?
errMsg
("
Server sent error message::
"
.
$response
->
faultstring
)
:
return
1
;
}
}
...
@@ -83,6 +95,7 @@ sub c2s
...
@@ -83,6 +95,7 @@ sub c2s
sub
saveNewEvent
sub
saveNewEvent
{
{
my
$result
;
my
$result
;
eval
{
eval
{
my
$warden_path
=
shift
;
my
$warden_path
=
shift
;
my
$event_ref
=
shift
;
my
$event_ref
=
shift
;
...
@@ -93,7 +106,8 @@ sub saveNewEvent
...
@@ -93,7 +106,8 @@ sub saveNewEvent
# read the config file
# read the config file
require
$libdir
.
"
WardenClientConf.pm
";
require
$libdir
.
"
WardenClientConf.pm
";
my
$conf_file
=
$etcdir
.
"
warden-client.conf
";
my
$conf_file
=
$etcdir
.
"
warden-client.conf
";
my
(
$uri
,
$ssl_key_file
,
$ssl_cert_file
,
$ssl_ca_file
)
=
WardenClientConf::
loadConf
(
$conf_file
);
my
(
$uri
,
$ssl_key_file
,
$ssl_cert_file
,
$ssl_ca_file
,
$max_rcv_events_limit
);
(
$uri
,
$ssl_key_file
,
$ssl_cert_file
,
$ssl_ca_file
,
$max_rcv_events_limit
,
$LOG_STDERR
,
$LOG_SYSLOG
,
$LOG_SYSLOG_FACILITY
,
$LOG_VERBOSE
)
=
WardenClientConf::
loadConf
(
$conf_file
);
# prepare variables of event
# prepare variables of event
my
@event
=
@
{
$event_ref
};
my
@event
=
@
{
$event_ref
};
...
@@ -112,31 +126,38 @@ sub saveNewEvent
...
@@ -112,31 +126,38 @@ sub saveNewEvent
# create SOAP data object
# create SOAP data object
my
$event
=
SOAP::
Data
->
name
(
my
$event
=
SOAP::
Data
->
name
(
event
=>
\
SOAP::
Data
->
value
(
event
=>
\
SOAP::
Data
->
value
(
SOAP::
Data
->
name
(
SERVICE
=>
$service
),
SOAP::
Data
->
name
(
SERVICE
=>
$service
),
SOAP::
Data
->
name
(
DETECTED
=>
$detected
),
SOAP::
Data
->
name
(
DETECTED
=>
$detected
),
SOAP::
Data
->
name
(
TYPE
=>
$type
),
SOAP::
Data
->
name
(
TYPE
=>
$type
),
SOAP::
Data
->
name
(
SOURCE_TYPE
=>
$source_type
),
SOAP::
Data
->
name
(
SOURCE_TYPE
=>
$source_type
),
SOAP::
Data
->
name
(
SOURCE
=>
$source
),
SOAP::
Data
->
name
(
SOURCE
=>
$source
),
SOAP::
Data
->
name
(
TARGET_PROTO
=>
$target_proto
),
SOAP::
Data
->
name
(
TARGET_PROTO
=>
$target_proto
),
SOAP::
Data
->
name
(
TARGET_PORT
=>
$target_port
),
SOAP::
Data
->
name
(
TARGET_PORT
=>
$target_port
),
SOAP::
Data
->
name
(
ATTACK_SCALE
=>
$attack_scale
),
SOAP::
Data
->
name
(
ATTACK_SCALE
=>
$attack_scale
),
SOAP::
Data
->
name
(
NOTE
=>
$note
),
SOAP::
Data
->
name
(
NOTE
=>
$note
),
SOAP::
Data
->
name
(
PRIORITY
=>
$priority
),
SOAP::
Data
->
name
(
PRIORITY
=>
$priority
),
SOAP::
Data
->
name
(
TIMEOUT
=>
$timeout
)
SOAP::
Data
->
name
(
TIMEOUT
=>
$timeout
)
)
)
);
);
$result
=
c2s
(
$uri
,
$ssl_key_file
,
$ssl_cert_file
,
$ssl_ca_file
,
"
saveNewEvent
",
$event
);
$result
=
c2s
(
$uri
,
$ssl_key_file
,
$ssl_cert_file
,
$ssl_ca_file
,
"
saveNewEvent
",
$event
);
#$result ? return 1 : return 0;
}
# End of eval block
};
#end of eval block
or
do
{
if
(
$@
)
{
if
(
$LOG_STDERR
)
{
print
STDERR
"
Warden-client unexpected end in eval block:
"
.
$@
.
"
\n
";
print
STDERR
"
Warden-client unexpected end in eval block.
\n
"
.
$@
.
"
\n
";
return
0
;
}
}
else
{
if
(
$LOG_SYSLOG
)
{
$result
?
return
1
:
return
0
;
openlog
("
Warden-client:
",
"
pid
",
"
$LOG_SYSLOG_FACILITY
");
syslog
("
err|
$LOG_SYSLOG_FACILITY
",
"
Warden-client unexpected end in eval block.
\n
"
.
$@
.
"
\n
");
closelog
();
}
}
return
0
;
};
$result
?
return
1
:
return
0
;
}
# End of saveNewEvent
}
# End of saveNewEvent
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment