modules.processing.snort.Snort

Package modules :: Package processing :: Module snort :: Class Snort |
[hide private]
[frames] | no frames]

# Class Snort

source code

                                object --+
                                         |
    lib.cuckoo.common.abstracts.Processing --+
                                             |
                                            Snort

Snort processing module.

Instance Methods | [hide private]
run(self) Start processing. | source code
Inherited from `lib.cuckoo.common.abstracts.Processing`: `__init__`, `set_baseline`, `set_options`, `set_path`, `set_results`, `set_task` Inherited from `object`: `__delattr__`, `__format__`, `__getattribute__`, `__hash__`, `__new__`, `__reduce__`, `__reduce_ex__`, `__repr__`, `__setattr__`, `__sizeof__`, `__str__`, `__subclasshook__`

Class Variables | [hide private]
| alert_re = `re.compile(r"(?P<timestamp>\d{2}/\d{2}/\d{2}-\d{2}:`...``
Inherited from `lib.cuckoo.common.abstracts.Processing`: `enabled`, `order`

Properties | [hide private]
Inherited from `object`: `__class__`

Method Details | [hide private]

### run(self) | source code
Start processing. Raises: `NotImplementedError` - this method is abstract. Overrides: lib.cuckoo.common.abstracts.Processing.run (inherited documentation)

Class Variable Details | [hide private]

  ### alert_re Value:
      re.compile(r"(?P<timestamp>\d{2}/\d{2}/\d{2}-\d{2}:\d{2}:\d{2}\.\d+)\s
      +" r"\[\*\*\]\s+\[\d+:(?P<sid>\d+):(?P<revision>\d+)\] " r"(?P<message
      >.+) \[\*\*\]\s+(\[Classification: (?P<classtype>.+)\] )?" r"\[Priorit
      y: (?P<priority>\d+)\] \{(?P<protocol>[:a-zA-Z0-9_-]+)\} " r"(?P<src>.
      +) \-\> (?P<dest>.+)")