dshield

package
v0.0.0-...-05965fc Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Dec 20, 2021 License: Apache-2.0 Imports: 18 Imported by: 0

Documentation

Overview

Copyright 2016-2019 DutchSec (https://dutchsec.com/)

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Copyright 2016-2019 DutchSec (https://dutchsec.com/)

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Copyright 2016-2019 DutchSec (https://dutchsec.com/)

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func GetMyIP

func GetMyIP() (string, error)

func Insecure

func Insecure(config *tls.Config) *tls.Config

func New

func New(options ...func(pushers.Channel) error) (pushers.Channel, error)

Types

type Backend

type Backend struct {
	Config

	MyIP string
	// contains filtered or unexported fields
}

Backend defines a struct which provides a channel for delivery push messages to an elasticsearch api.

func (Backend) MakeAuthHeader

func (hc Backend) MakeAuthHeader() (string, error)

func (Backend) Send

func (hc Backend) Send(message event.Event)

Send delivers the giving push messages into dshield endpoint.

type Config

type Config struct {
	URL string `toml:"url"`

	Insecure bool `toml:"insecure"`
	Debug    bool `toml:"debug"`

	UserID string `toml:"user_id"`
	APIKey string `toml:"api_key"`
}

Config defines a struct which holds configuration values for a SearchBackend.

type HTTPEvent

type HTTPEvent struct {
	Date time.Time

	SourceIP        string
	DestinationIP   string
	SourcePort      int
	DestinationPort int

	Method    string
	UserAgent string
	URL       string
}

func (*HTTPEvent) MarshalJSON

func (e *HTTPEvent) MarshalJSON() ([]byte, error)

type SSHEvent

type SSHEvent struct {
	Date time.Time

	SourceIP        string
	DestinationIP   string
	SourcePort      int
	DestinationPort int

	Username string
	Password string
}

func (*SSHEvent) MarshalJSON

func (e *SSHEvent) MarshalJSON() ([]byte, error)

type Submit

type Submit struct {
	AuthHeader string `json:"authheader"`

	Type string           `json:"type"`
	Logs []json.Marshaler `json:"logs"`
}

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL