syslog

package
v0.9.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 9, 2026 License: BSD-3-Clause, GPL-3.0 Imports: 10 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source
var Decoder = &decoder.StreamDecoder{
	Type:        types.Type_NC_Syslog,
	Name:        serviceSyslog,
	Description: "Syslog is a standard for message logging, used for security event monitoring",
	PostInit: func(d *decoder.StreamDecoder) error {
		var err error
		syslogLog, _, err = logging.InitZapLogger(
			decoderconfig.Instance.Out,
			"syslog",
			decoderconfig.Instance.Debug,
		)
		return err
	},
	CanDecode: func(client, server []byte) bool {

		if len(server) > 3 && server[0] == '<' {
			for i := 1; i < len(server) && i < 5; i++ {
				if server[i] == '>' {
					return true
				}
				if server[i] < '0' || server[i] > '9' {
					break
				}
			}
		}
		if len(client) > 3 && client[0] == '<' {
			for i := 1; i < len(client) && i < 5; i++ {
				if client[i] == '>' {
					return true
				}
				if client[i] < '0' || client[i] > '9' {
					break
				}
			}
		}
		return false
	},
	DeInit: func(sd *decoder.StreamDecoder) error {
		return syslogLog.Sync()
	},
	Factory: &syslogReader{},
	Typ:     core.UDP,
}

Decoder for protocol analysis and writing audit records to disk.

Functions

This section is empty.

Types

This section is empty.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL