rust/snmp: Support get-info-by-id

pull/3998/head
Jeff Lucovsky 7 years ago committed by Victor Julien
parent 7560b75591
commit 6911cc01ad

@ -39,6 +39,16 @@ pub enum SNMPEvent {
UnknownSecurityModel, UnknownSecurityModel,
} }
impl SNMPEvent {
fn from_i32(value: i32) -> Option<SNMPEvent> {
match value {
0 => Some(SNMPEvent::MalformedData),
1 => Some(SNMPEvent::UnknownSecurityModel),
_ => None,
}
}
}
pub struct SNMPState { pub struct SNMPState {
/// SNMP protocol version /// SNMP protocol version
pub version: u32, pub version: u32,
@ -438,6 +448,27 @@ pub extern "C" fn rs_snmp_state_get_events(tx: *mut std::os::raw::c_void)
return tx.events; return tx.events;
} }
#[no_mangle]
pub extern "C" fn rs_snmp_state_get_event_info_by_id(event_id: std::os::raw::c_int,
event_name: *mut *const std::os::raw::c_char,
event_type: *mut core::AppLayerEventType)
-> i8
{
if let Some(e) = SNMPEvent::from_i32(event_id as i32) {
let estr = match e {
SNMPEvent::MalformedData => { "malformed_data\0" },
SNMPEvent::UnknownSecurityModel => { "unknown_security_model\0" },
};
unsafe{
*event_name = estr.as_ptr() as *const std::os::raw::c_char;
*event_type = core::APP_LAYER_EVENT_TYPE_TRANSACTION;
};
0
} else {
-1
}
}
#[no_mangle] #[no_mangle]
pub extern "C" fn rs_snmp_state_get_event_info(event_name: *const std::os::raw::c_char, pub extern "C" fn rs_snmp_state_get_event_info(event_name: *const std::os::raw::c_char,
event_id: *mut std::os::raw::c_int, event_id: *mut std::os::raw::c_int,
@ -579,6 +610,7 @@ pub unsafe extern "C" fn rs_register_snmp_parser() {
set_de_state : rs_snmp_state_set_tx_detect_state, set_de_state : rs_snmp_state_set_tx_detect_state,
get_events : Some(rs_snmp_state_get_events), get_events : Some(rs_snmp_state_get_events),
get_eventinfo : Some(rs_snmp_state_get_event_info), get_eventinfo : Some(rs_snmp_state_get_event_info),
get_eventinfo_byid : Some(rs_snmp_state_get_event_info_by_id),
localstorage_new : None, localstorage_new : None,
localstorage_free : None, localstorage_free : None,
get_tx_mpm_id : None, get_tx_mpm_id : None,
@ -604,6 +636,6 @@ pub unsafe extern "C" fn rs_register_snmp_parser() {
let _ = AppLayerRegisterParser(&parser, alproto); let _ = AppLayerRegisterParser(&parser, alproto);
} }
} else { } else {
SCLogDebug!("Protocol detecter and parser disabled for SNMP."); SCLogDebug!("Protocol detector and parser disabled for SNMP.");
} }
} }

Loading…
Cancel
Save