network.detectors
Class RSHEventDetector

java.lang.Object
  |
  +--network.detectors.EventDetector
        |
        +--network.detectors.SyslogEventDetector
              |
              +--network.detectors.RSHEventDetector

All Implemented Interfaces:

java.lang.Runnable, java.io.Serializable

public class RSHEventDetector

extends SyslogEventDetector

implements java.io.Serializable

Detects logins using the RSH protocol Triggered by default by SyslogEvent Detects RSH logins by matching RSH in a syslog line

See Also:

Serialized Form

Field Summary

(package private) java.lang.String[]

defaultLocalTriggeringEvents

Fields inherited from class network.detectors.SyslogEventDetector

compiler, currentYear, dis, eventInfoTable, eventName, file, LIMIT, logFilename, matcher, monthLookup, newLen, paramInstr, paramProcInstr, pattern, prevLen, ptr, run_mode, toolsCreated

Fields inherited from class network.detectors.EventDetector

agentURN, attempts, cred, dbModule, eventIDGenerator, eventTable, host, localTriggeringEvents, printRunningThreadsFlag, remoteTriggeringEvents, reportTable

Constructor Summary

RSHEventDetector(ConfigObject configObj)
Creates an instance of RSHEventDetector with the default triggering events

RSHEventDetector(java.util.Vector localtriggeringEventClassNames, java.util.Vector remotetriggeringEventClassNames, ConfigObject configObj)
Creates an instance of RSHEventDetector with the given triggering events

Method Summary

java.util.Vector	generateEvent(network.events.Event triggeredEvent) Detects RSH login attempts Parses lines from the syslog file to look for RSH
java.lang.String	getGeneratingEventClassName() Returns the name of the event that this class generates

Methods inherited from class network.detectors.SyslogEventDetector

match, modifyDetector, parsePatternFile, populatePatterns, setLastReadTime

Methods inherited from class network.detectors.EventDetector

getAlarmLevel, getAlertLevel, getLocalTriggeringEventClassNames, getRemoteTriggeringEventClassNames, getSynchronizer, InitializeFields, printRunningThreads, run, setAgentURN, setAlarmLevel, setAlertLevel, setDB, setEventIDGenerator, setEventTable, setLocalTriggeringEvents, setRemoteTriggeringEvents, setReportTable, stopDetector, switchOffPrintRunningThreads

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

defaultLocalTriggeringEvents

java.lang.String[] defaultLocalTriggeringEvents

Constructor Detail

RSHEventDetector

public RSHEventDetector(ConfigObject configObj)
                 throws java.lang.Exception

Creates an instance of RSHEventDetector with the default triggering events

RSHEventDetector

public RSHEventDetector(java.util.Vector localtriggeringEventClassNames,
                        java.util.Vector remotetriggeringEventClassNames,
                        ConfigObject configObj)
                 throws java.lang.Exception

Creates an instance of RSHEventDetector with the given triggering events

Method Detail

getGeneratingEventClassName

public java.lang.String getGeneratingEventClassName()

Returns the name of the event that this class generates

Overrides:

getGeneratingEventClassName in class SyslogEventDetector

Returns:

A string containing the name of the event this class generates

generateEvent

public java.util.Vector generateEvent(network.events.Event triggeredEvent)

Detects RSH login attempts Parses lines from the syslog file to look for RSH

Overrides:

generateEvent in class SyslogEventDetector

Parameters:

triggeredEvent - The event that triggers this detector

Returns:

A vector of events. Each element corresponds to a single detected RSH login