network.detectors
Class SFtpEventDetector

java.lang.Object
  network.detectors.EventDetector
      network.detectors.SyslogEventDetector
          network.detectors.SFtpEventDetector

All Implemented Interfaces:

java.lang.Runnable, java.io.Serializable

public class SFtpEventDetector

extends SyslogEventDetector

implements java.io.Serializable

Detects SFtp events. Will detect refused connections, login failures, ftp initiation, sftp requests, and connection refused because of unknown hosts This is accomplished by matching lines in the syslog file

See Also:

Serialized Form

Field Summary

Fields inherited from class network.detectors.SyslogEventDetector

compiler, currentYear, eventName, matcher, monthLookup, paramInstr, paramProcInstr, pattern, toolsCreated

Fields inherited from class network.detectors.EventDetector

agentURN, cred, dbModule, eventIDGenerator, eventTable, host, localTriggeringEvents, remoteTriggeringEvents, reportTable

Constructor Summary

SFtpEventDetector(ConfigObject configObj)
Instantiates the detector with default triggering events

SFtpEventDetector(java.util.Vector localtriggeringEventClassNames, java.util.Vector remotetriggeringEventClassNames, ConfigObject configObj)
Instantiates the detector with the given triggering events

Method Summary

java.util.Vector	generateEvent(Event triggeredEvent) Detects if the syslog lines contained in triggeredEvent contain SFtp information.
java.lang.String	getGeneratingEventClassName() Returns the name of the event that this detector generates

Methods inherited from class network.detectors.SyslogEventDetector

match, modifyDetector, parsePatternFile, populatePatterns, setLastReadTime

Methods inherited from class network.detectors.EventDetector

getAlarmLevel, getAlertLevel, getLocalTriggeringEventClassNames, getRemoteTriggeringEventClassNames, getSynchronizer, InitializeFields, printRunningThreads, run, setAgentURN, setAlarmLevel, setAlertLevel, setDB, setEventIDGenerator, setEventTable, setLocalTriggeringEvents, setRemoteTriggeringEvents, setReportTable, stopDetector, switchOffPrintRunningThreads

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SFtpEventDetector

public SFtpEventDetector(java.util.Vector localtriggeringEventClassNames,
                         java.util.Vector remotetriggeringEventClassNames,
                         ConfigObject configObj)
                  throws java.lang.Exception

Instantiates the detector with the given triggering events

SFtpEventDetector

public SFtpEventDetector(ConfigObject configObj)
                  throws java.lang.Exception

Instantiates the detector with default triggering events

Method Detail

getGeneratingEventClassName

public java.lang.String getGeneratingEventClassName()

Returns the name of the event that this detector generates

Overrides:

getGeneratingEventClassName in class SyslogEventDetector

Returns:

A String containing the name of the event this detector generates

generateEvent

public java.util.Vector generateEvent(Event triggeredEvent)

Detects if the syslog lines contained in triggeredEvent contain SFtp information. This will match strings corresponding to refused connections, login failures, ftp initiation, sftp requests, and connection refused connections due to unknown hosts.

Overrides:

generateEvent in class SyslogEventDetector

Parameters:

triggeredEvent - The event that triggers this event.

Returns:

A vector of events. Each entry corresponds to a detected SFtp event.