Package modules :: Package processing :: Module snort :: Class Snort
[hide private]
[frames] | no frames]

Class Snort

source code

                            object --+    
                                     |    
lib.cuckoo.common.abstracts.Processing --+
                                         |
                                        Snort

Snort processing module.

Instance Methods [hide private]
 
run(self)
Start processing.
source code

Inherited from lib.cuckoo.common.abstracts.Processing: __init__, set_baseline, set_options, set_path, set_results, set_task

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables [hide private]
  alert_re = re.compile(r"(?P<timestamp>\d{2}/\d{2}/\d{2}-\d{2}:...

Inherited from lib.cuckoo.common.abstracts.Processing: enabled, order

Properties [hide private]

Inherited from object: __class__

Method Details [hide private]

run(self)

source code 

Start processing.

Raises:
  • NotImplementedError - this method is abstract.
Overrides: lib.cuckoo.common.abstracts.Processing.run
(inherited documentation)

Class Variable Details [hide private]

alert_re

Value:
re.compile(r"(?P<timestamp>\d{2}/\d{2}/\d{2}-\d{2}:\d{2}:\d{2}\.\d+)\s\
+" r"\[\*\*\]\s+\[\d+:(?P<sid>\d+):(?P<revision>\d+)\] " r"(?P<message\
>.+) \[\*\*\]\s+(\[Classification: (?P<classtype>.+)\] )?" r"\[Priorit\
y: (?P<priority>\d+)\] \{(?P<protocol>[:a-zA-Z0-9_-]+)\} " r"(?P<src>.\
+) \-\> (?P<dest>.+)")