Sha256: 7da02284f4cbb5db9d2df8939a1cda5308e139dc0a43370dd9905b9679db72b5

Contents?: true

Size: 1.83 KB

Versions: 18

Compression:

Stored size: 1.83 KB

Contents

# Copyright (c) 2015 Sqreen. All Rights Reserved.
# Please refer to our terms for more information: https://www.sqreen.io/terms.html

require 'sqreen/event'

module Sqreen
  # Attack
  # When creating a new attack, it gets automatically pushed to the event's
  # queue.
  class Attack < Event
    def self.record(payload)
      attack = Attack.new(payload)
      attack.enqueue
    end

    def infos
      payload['infos']
    end

    def rulespack_id
      return nil unless payload['rule']
      payload['rule']['rulespack_id']
    end

    def type
      return nil unless payload['rule']
      payload['rule']['name']
    end

    def time
      return nil unless payload['local']
      payload['local']['time']
    end

    def backtrace
      return nil unless payload['context']
      payload['context']['backtrace']
    end

    def enqueue
      Sqreen.queue.push(self)
    end

    def to_hash
      res = {}
      rule_p = payload['rule']
      request_p = payload['request']
      whitelisted = request_p.delete('whitelisted') if request_p
      res[:rule_name]    = rule_p['name']         if rule_p && rule_p['name']
      res[:rulespack_id] = rule_p['rulespack_id'] if rule_p && rule_p['rulespack_id']
      res[:test]         = rule_p['test']         if rule_p && rule_p['test']
      res[:infos]        = payload['infos']       if payload['infos']
      res[:time]         = time                   if time
      res[:client_ip]    = request_p[:addr]       if request_p && request_p[:addr]
      res[:request]      = request_p              if request_p
      res[:params]       = payload['params']      if payload['params']
      res[:context]      = payload['context']     if payload['context']
      res[:headers]      = payload['headers']     if payload['headers']
      res[:whitelist_match] = whitelisted         if whitelisted
      res
    end
  end
end

Version data entries

18 entries across 18 versions & 1 rubygems

Version Path
sqreen-1.6.5-java lib/sqreen/events/attack.rb
sqreen-1.6.5 lib/sqreen/events/attack.rb
sqreen-1.6.4-java lib/sqreen/events/attack.rb
sqreen-1.6.4 lib/sqreen/events/attack.rb
sqreen-1.6.3-java lib/sqreen/events/attack.rb
sqreen-1.6.3 lib/sqreen/events/attack.rb
sqreen-1.6.2-java lib/sqreen/events/attack.rb
sqreen-1.6.2 lib/sqreen/events/attack.rb
sqreen-1.6.1-java lib/sqreen/events/attack.rb
sqreen-1.6.1 lib/sqreen/events/attack.rb
sqreen-1.6.0-java lib/sqreen/events/attack.rb
sqreen-1.6.0 lib/sqreen/events/attack.rb
sqreen-1.5.0-java lib/sqreen/events/attack.rb
sqreen-1.5.0 lib/sqreen/events/attack.rb
sqreen-1.4.3-java lib/sqreen/events/attack.rb
sqreen-1.4.3 lib/sqreen/events/attack.rb
sqreen-1.4.2-java lib/sqreen/events/attack.rb
sqreen-1.4.2 lib/sqreen/events/attack.rb