eve/alert: add missing pgsql metadata

Bug #6092
pull/10856/head
Juliana Fajardini 2 years ago committed by Victor Julien
parent 120313f4da
commit 54ea6c5983

@ -1,4 +1,4 @@
/* Copyright (C) 2022 Open Information Security Foundation
/* Copyright (C) 2022-2024 Open Information Security Foundation
*
* You can copy, redistribute or modify this Program under the terms of
* the GNU General Public License version 2 as published by the Free
@ -47,6 +47,7 @@
#include "rust.h"
#define PGSQL_LOG_PASSWORDS BIT_U32(0)
#define PGSQL_DEFAULTS (PGSQL_LOG_PASSWORDS)
typedef struct OutputPgsqlCtx_ {
uint32_t flags;
@ -58,6 +59,11 @@ typedef struct LogPgsqlLogThread_ {
OutputJsonThreadCtx *ctx;
} LogPgsqlLogThread;
bool JsonPgsqlAddMetadata(void *vtx, JsonBuilder *jb)
{
return rs_pgsql_logger(vtx, PGSQL_DEFAULTS, jb);
}
static int JsonPgsqlLogger(ThreadVars *tv, void *thread_data, const Packet *p, Flow *f, void *state,
void *txptr, uint64_t tx_id)
{

@ -1,4 +1,4 @@
/* Copyright (C) 2022 Open Information Security Foundation
/* Copyright (C) 2022-2024 Open Information Security Foundation
*
* You can copy, redistribute or modify this Program under the terms of
* the GNU General Public License version 2 as published by the Free
@ -25,5 +25,6 @@
#define SURICATA_OUTPUT_JSON_PGSQL_H
void JsonPgsqlLogRegister(void);
bool JsonPgsqlAddMetadata(void *vtx, JsonBuilder *jb);
#endif /* SURICATA_OUTPUT_JSON_PGSQL_H */

@ -1133,7 +1133,7 @@ static EveJsonSimpleAppLayerLogger simple_json_applayer_loggers[ALPROTO_MAX] = {
{ ALPROTO_SIP, (EveJsonSimpleTxLogFunc)rs_sip_log_json },
{ ALPROTO_RFB, rs_rfb_logger_log },
{ ALPROTO_MQTT, JsonMQTTAddMetadata },
{ ALPROTO_PGSQL, NULL }, // TODO missing
{ ALPROTO_PGSQL, JsonPgsqlAddMetadata },
{ ALPROTO_TELNET, NULL }, // no logging
{ ALPROTO_TEMPLATE, rs_template_logger_log },
{ ALPROTO_RDP, (EveJsonSimpleTxLogFunc)rs_rdp_to_json },

Loading…
Cancel
Save