-- phpMyAdmin SQL Dump -- version 3.4.11.1deb2+deb7u1 -- http://www.phpmyadmin.net -- -- Host: localhost -- Generation Time: Dec 04, 2014 at 02:54 PM -- Server version: 5.5.38 -- PHP Version: 5.4.4-14+deb7u14 SET SQL_MODE="NO_AUTO_VALUE_ON_ZERO"; SET time_zone = "+00:00"; /*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */; /*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */; /*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */; /*!40101 SET NAMES utf8 */; -- -- Database: `warden3` -- -- -------------------------------------------------------- -- -- Table structure for table `categories` -- CREATE TABLE IF NOT EXISTS `categories` ( `id` int(11) NOT NULL, `category` varchar(64) NOT NULL, `subcategory` varchar(64) DEFAULT NULL, `cat_subcat` varchar(129) NOT NULL, KEY `cat_sub` (`cat_subcat`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 DEFAULT COLLATE utf8mb4_unicode_ci; -- -- Dumping data for table `categories` -- INSERT INTO `categories` (`id`, `category`, `subcategory`, `cat_subcat`) VALUES (100, 'Abusive', NULL, 'Abusive'), (101, 'Abusive', 'Spam', 'Abusive.Spam'), (102, 'Abusive', 'Harassment', 'Abusive.Harassment'), (103, 'Abusive', 'Child', 'Abusive.Child'), (104, 'Abusive', 'Sexual', 'Abusive.Sexual'), (105, 'Abusive', 'Violence', 'Abusive.Violence'), (200, 'Malware', NULL, 'Malware'), (201, 'Malware', 'Virus', 'Malware.Virus'), (202, 'Malware', 'Worm', 'Malware.Worm'), (203, 'Malware', 'Trojan', 'Malware.Trojan'), (204, 'Malware', 'Spyware', 'Malware.Spyware'), (205, 'Malware', 'Dialer', 'Malware.Dialer'), (206, 'Malware', 'Rootkit', 'Malware.Rootkit'), (300, 'Recon', NULL, 'Recon'), (301, 'Recon', 'Scanning', 'Recon.Scanning'), (302, 'Recon', 'Sniffing', 'Recon.Sniffing'), (303, 'Recon', 'SocialEngineering', 'Recon.SocialEngineering'), (304, 'Recon', 'Searching', 'Recon.Searching'), (400, 'Attempt', NULL, 'Attempt'), (401, 'Attempt', 'Exploit', 'Attempt.Exploit'), (402, 'Attempt', 'Login', 'Attempt.Login'), (403, 'Attempt', 'NewSignature', 'Attempt.NewSignature'), (500, 'Intrusion', NULL, 'Intrusion'), (501, 'Intrusion', 'AdminCompromise', 'Intrusion.AdminCompromise'), (502, 'Intrusion', 'UserCompromise', 'Intrusion.UserCompromise'), (503, 'Intrusion', 'AppCompromise', 'Intrusion.AppCompromise'), (504, 'Intrusion', 'Botnet', 'Intrusion.Botnet'), (600, 'Availability', NULL, 'Availability'), (601, 'Availability', 'DoS', 'Availability.DoS'), (602, 'Availability', 'DDoS', 'Availability.DDoS'), (603, 'Availability', 'Sabotage', 'Availability.Sabotage'), (604, 'Availability', 'Outage', 'Availability.Outage'), (700, 'Information', NULL, 'Information'), (701, 'Information', 'UnauthorizedAccess', 'Information.UnauthorizedAccess'), (702, 'Information', 'UnauthorizedModification', 'Information.UnauthorizedModification'), (800, 'Fraud', NULL, 'Fraud'), (801, 'Fraud', 'UnauthorizedUsage', 'Fraud.UnauthorizedUsage'), (802, 'Fraud', 'Copyright', 'Fraud.Copyright'), (803, 'Fraud', 'Masquerade', 'Fraud.Masquerade'), (804, 'Fraud', 'Phishing', 'Fraud.Phishing'), (805, 'Fraud', 'Scam', 'Fraud.Scam'), (900, 'Vulnerable', NULL, 'Vulnerable'), (901, 'Vulnerable', 'Open', 'Vulnerable.Open'), (1000, 'Anomaly', NULL, 'Anomaly'), (1001, 'Anomaly', 'Traffic', 'Anomaly.Traffic'), (1002, 'Anomaly', 'Connection', 'Anomaly.Connection'), (1003, 'Anomaly', 'Protocol', 'Anomaly.Protocol'), (1004, 'Anomaly', 'System', 'Anomaly.System'), (1005, 'Anomaly', 'Application', 'Anomaly.Application'), (1006, 'Anomaly', 'Behaviour', 'Anomaly.Behaviour'), (9998, 'Other', '', 'Other'), (9999, 'Test', '', 'Test'); -- -------------------------------------------------------- -- -- Table structure for table `clients` -- CREATE TABLE IF NOT EXISTS `clients` ( `id` int(11) NOT NULL AUTO_INCREMENT, `registered` timestamp NOT NULL DEFAULT '0000-00-00 00:00:00', `requestor` varchar(256) NOT NULL, `hostname` varchar(256) NOT NULL, `service` varchar(256) NOT NULL, `note` text NOT NULL, `valid` tinyint(1) NOT NULL DEFAULT '1', `identity` varchar(64) NOT NULL, `secret` varchar(16) NULL, `read` tinyint(1) NOT NULL DEFAULT '1', `debug` tinyint(1) NOT NULL DEFAULT '0', `write` tinyint(1) NOT NULL DEFAULT '0', `test` int(11) NOT NULL DEFAULT '0', PRIMARY KEY (`id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 DEFAULT COLLATE utf8mb4_unicode_ci AUTO_INCREMENT=31 ; -- -- Dumping data for table `clients` -- INSERT INTO `clients` (`id`, `registered`, `requestor`, `hostname`, `service`, `note`, `valid`, `identity`, `secret`, `read`, `debug`, `write`, `test`) VALUES (1, '0000-00-00 00:00:00', '', 'afrodita.civ.zcu.cz', 'hihat', '', 1, 'cz.zcu.civ.afrodita.hihat', NULL, 1, 0, 1, 0), (2, '0000-00-00 00:00:00', '', 'afrodita.civ.zcu.cz', 'labrea', '', 1, 'cz.zcu.civ.afrodita.labrea', NULL, 1, 0, 1, 0), (3, '0000-00-00 00:00:00', '', 'au1.cesnet.cz', 'cesnet_ids', '', 1, 'cz.cesnet.au1.cesnet_ids', NULL, 1, 0, 1, 0), (4, '0000-00-00 00:00:00', '', 'au1.cesnet.cz', 'cesnet_sserv', '', 1, 'cz.cesnet.au1.cesnet_sserv', NULL, 1, 0, 1, 0), (5, '0000-00-00 00:00:00', '', 'au1.cesnet.cz', 'n6d-dorkbot', '', 1, 'cz.cesnet.au1.n6d-dorkbot', NULL, 1, 0, 1, 0), (6, '0000-00-00 00:00:00', '', 'au1.cesnet.cz', 'n6e-certplsinkhole', '', 1, 'cz.cesnet.au1.n6e-certplsinkhole', NULL, 1, 0, 1, 0), (7, '0000-00-00 00:00:00', '', 'au1.cesnet.cz', 'n6i-citadelsinkhole', '', 1, 'cz.cesnet.au1.n6i-citadelsinkhole', NULL, 1, 0, 1, 0), (8, '0000-00-00 00:00:00', '', 'au1.cesnet.cz', 'n6i-citadelsinkholeqd', '', 1, 'cz.cesnet.au1.n6i-citadelsinkholeqd', NULL, 1, 0, 1, 0), (9, '0000-00-00 00:00:00', '', 'au1.cesnet.cz', 'n6n-openntp', '', 1, 'cz.cesnet.au1.n6n-openntp', NULL, 1, 0, 1, 0), (10, '0000-00-00 00:00:00', '', 'au1.cesnet.cz', 'n6o-botszeroaccess', '', 1, 'cz.cesnet.au1.n6o-botszeroaccess', NULL, 1, 0, 1, 0), (11, '0000-00-00 00:00:00', '', 'au1.cesnet.cz', 'report_n6v-virut', '', 1, 'cz.cesnet.au1.report_n6v-virut', NULL, 1, 0, 1, 0), (12, '0000-00-00 00:00:00', '', 'au2.cesnet.cz', 'ids-cz', '', 1, 'cz.cesnet.au2.ids-cz', NULL, 1, 0, 1, 0), (13, '0000-00-00 00:00:00', '', 'bee.net.vutbr.cz', 'hpscan', '', 1, 'cz.vutbr.net.bee.hpscan', NULL, 1, 0, 1, 0), (14, '0000-00-00 00:00:00', '', 'buldog.vsb.cz', 'kippo', '', 1, 'cz.vsb.buldog.kippo', NULL, 1, 0, 1, 0), (15, '0000-00-00 00:00:00', '', 'collector-nemea.liberouter.org', 'nemea', '', 1, 'org.liberouter.collector-nemea.nemea', NULL, 1, 0, 1, 0), (16, '0000-00-00 00:00:00', '', 'collector.liberouter.org', 'hoststats', '', 1, 'org.liberouter.collector.hoststats', NULL, 1, 0, 1, 0), (17, '0000-00-00 00:00:00', '', 'collector.liberouter.org', 'synscandetector_1_0', '', 1, 'org.liberouter.collector.synscandetector_1_0', NULL, 1, 0, 1, 0), (18, '0000-00-00 00:00:00', '', 'holly.cesnet.cz', 'kippohoneypot', '', 1, 'cz.cesnet.holly.kippohoneypot', NULL, 1, 0, 1, 0), (19, '0000-00-00 00:00:00', '', 'kryten.cesnet.cz', 'dionaeahoneypot', '', 1, 'cz.cesnet.kryten.dionaeahoneypot', NULL, 1, 0, 1, 0), (20, '0000-00-00 00:00:00', '', 'mentat.cesnet.cz', 'mentat', '', 1, 'cz.cesnet.mentat.mentat', NULL, 1, 0, 1, 0), (21, '0000-00-00 00:00:00', '', 'miel.opf.slu.cz', 'kippo', '', 1, 'cz.slu.opf.miel.kippo', NULL, 1, 0, 1, 0), (22, '0000-00-00 00:00:00', '', 'nfsen.ics.muni.cz', 'honeyscan', '', 1, 'cz.muni.ics.nfsen.honeyscan', NULL, 1, 0, 1, 0), (23, '0000-00-00 00:00:00', '', 'nfsen.ics.muni.cz', 'scandetector_1_0', '', 1, 'cz.muni.ics.nfsen.scandetector_1_0', NULL, 1, 0, 1, 0), (24, '0000-00-00 00:00:00', '', 'nfsen.ics.muni.cz', 'sshbruteforce-1_n', '', 1, 'cz.muni.ics.nfsen.sshbruteforce-1_n', NULL, 1, 0, 1, 0), (25, '0000-00-00 00:00:00', '', 'vinovago.cesnet.cz', 'fail2ban', '', 1, 'cz.cesnet.vinovago.fail2ban', NULL, 1, 0, 1, 0), (26, '0000-00-00 00:00:00', '', 'ward.tul.cz', 'dionaeatul', '', 1, 'cz.tul.ward.dionaeatul', NULL, 1, 0, 1, 0), (27, '0000-00-00 00:00:00', '', 'ward.tul.cz', 'kippo', '', 1, 'cz.tul.ward.kippo', NULL, 1, 0, 1, 0), (28, '0000-00-00 00:00:00', 'kostenec@civ.zcu.cz', 'kostik.zcu.cz', 'com.example.test-node', '', 1, 'com.example.test-node', "Phaipe5ush7p", 1, 0, 0, 0), (29, '0000-00-00 00:00:00', 'kostenec@civ.zcu.cz', 'kostik.zcu.cz', 'com.example.test-node2', '', 1, 'com.example.test-node2', NULL, 1, 0, 0, 0), (30, '0000-00-00 00:00:00', 'kostenec@civ.zcu.cz', 'kostik.zcu.cz', 'Test', '', 1, 'com.example.test-node3', NULL, 1, 0, 0, 0), (31, '2014-12-11 13:51:18', 'ph@cesnet.cz', 'grey.cesnet.cz', 'Test', '', 1, 'cz.cesnet.grey.test', "co3kaero5Ruv", 1, 1, 1, 0); -- -------------------------------------------------------- -- -- Table structure for table `events` -- CREATE TABLE IF NOT EXISTS `events` ( `id` int(11) NOT NULL AUTO_INCREMENT, `received` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP, `client_id` int(11) NOT NULL, `data` text NOT NULL, `valid` tinyint(1) NOT NULL DEFAULT '1', PRIMARY KEY (`id`), KEY `id` (`id`,`client_id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 DEFAULT COLLATE utf8mb4_unicode_ci AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `event_category_mapping` -- CREATE TABLE IF NOT EXISTS `event_category_mapping` ( `event_id` int(11) NOT NULL, `category_id` int(11) NOT NULL, KEY `event_id_2` (`event_id`,`category_id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 DEFAULT COLLATE utf8mb4_unicode_ci; -- -------------------------------------------------------- -- -- Table structure for table `event_tag_mapping` -- CREATE TABLE IF NOT EXISTS `event_tag_mapping` ( `event_id` int(11) NOT NULL, `tag_id` int(11) NOT NULL, KEY `event_id_2` (`event_id`,`tag_id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 DEFAULT COLLATE utf8mb4_unicode_ci; -- -------------------------------------------------------- -- -- Table structure for table `last_events` -- CREATE TABLE IF NOT EXISTS `last_events` ( `id` int(11) NOT NULL AUTO_INCREMENT, `client_id` int(11) NOT NULL, `event_id` int(11) NOT NULL, `timestamp` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP, PRIMARY KEY (`id`), KEY `client_id` (`client_id`,`event_id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 DEFAULT COLLATE utf8mb4_unicode_ci AUTO_INCREMENT=1 ; -- -------------------------------------------------------- -- -- Table structure for table `tags` -- CREATE TABLE IF NOT EXISTS `tags` ( `id` int(11) NOT NULL, `tag` varchar(64) NOT NULL, KEY `id_tag_name` (`id`,`tag`), KEY `tag_name` (`tag`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 DEFAULT COLLATE utf8mb4_unicode_ci; -- -- Dumping data for table `tags` -- INSERT INTO `tags` (`id`, `tag`) VALUES (1, 'Connection'), (2, 'Datagram'), (3, 'Content'), (4, 'Data'), (5, 'File'), (6, 'Flow'), (7, 'Log'), (8, 'Protocol'), (9, 'Host'), (10, 'Network'), (11, 'Correlation'), (12, 'External'), (13, 'Reporting'), (99, 'Other'); /*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */; /*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */; /*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;