Gecko [ www.airco.bigpunchmedia.co.za ]

Name	Size	Permission	Date
active-list.pl	2.66 KB	-rwxr-x---	2026-06-01 10:55
add_localfile.sh	791 B	-rwxr-x---	2026-06-01 10:55
compile_alerts.pl	2.97 KB	-rwxr-x---	2026-06-01 10:55
compile_alerts.txt	8.81 KB	-rw-r-----	2026-06-01 10:55
config2xml	5.31 KB	-rwxr-x---	2026-06-01 10:55
mysql.schema	2.97 KB	-rw-r--r--	2026-06-01 10:55
ossec-batch-manager.pl	10.69 KB	-rwxr-x---	2026-06-01 10:55
ossec-eps.sh	857 B	-rwxr-x---	2026-06-01 10:55
ossec-pcre2-config.pl	1.88 KB	-rwxr-x---	2026-06-01 10:55
ossec2mysql.conf	188 B	-rw-r-----	2026-06-01 10:55
ossec2mysql.pl	14.12 KB	-rwxr-x---	2026-06-01 10:55
ossec2mysql.sql	2.69 KB	-rw-r-----	2026-06-01 10:55
ossec2mysqld.pl	14.8 KB	-rwxr-x---	2026-06-01 10:55
ossec_report.txt	1.04 KB	-rw-r-----	2026-06-01 10:55
ossec_report_contrib.pl	4.93 KB	-rwxr-x---	2026-06-01 10:55
ossecmysql.pm	1.73 KB	-rw-r-----	2026-06-01 10:55
ossectop.pl	7.02 KB	-rwxr-x---	2026-06-01 10:55
postgresql.schema	2.93 KB	-rw-r--r--	2026-06-01 10:55
rename_agent.sh	1.31 KB	-rwxr-x---	2026-06-01 10:55
renumber_agent.sh	1.26 KB	-rwxr-x---	2026-06-01 10:55
util.sh	4.4 KB	-rwxr-x---	2026-06-01 10:55
version_bump.sh	1.24 KB	-rwxr-x---	2026-06-01 10:55

Rename

-- Copyright (C) 2009 Trend Micro Inc.
-- All rights reserved.
--
-- This program is a free software; you can redistribute it
-- and/or modify it under the terms of the GNU General Public
-- License (version 2) as published by the FSF - Free Software
-- Foundation.

BEGIN;

CREATE TABLE category
    (
    cat_id      SERIAL  NOT NULL,
    cat_name    VARCHAR(32) NOT NULL    UNIQUE,
    PRIMARY KEY (cat_id)
    );
CREATE INDEX cat_name ON category (cat_name);

CREATE TABLE signature
    (
    id          SERIAL          NOT NULL,
    rule_id     INT8           NOT NULL UNIQUE,
    level       INT4,
    description VARCHAR(255)    NOT NULL,
    PRIMARY KEY (id)
    );
CREATE INDEX signature_level ON signature (level);
CREATE INDEX signature_rule_id ON signature (rule_id);

CREATE TABLE signature_category_mapping
    (
    id          SERIAL      NOT NULL,
    rule_id     INT8       NOT NULL,
    cat_id      INT4       NOT NULL,
    PRIMARY KEY  (id, rule_id, cat_id)
    );

CREATE TABLE server
    (
    id              SERIAL               NOT NULL,
    last_contact    INT8                 NOT NULL,
    version         VARCHAR(32)          NOT NULL,
    hostname        VARCHAR(64)          NOT NULL   UNIQUE,
    information     TEXT                 NOT NULL,
    PRIMARY KEY  (id)
    );

CREATE TABLE agent
    (
    id              SERIAL       NOT NULL,
    server_id       INT8         NOT NULL,
    last_contact    INT8         NOT NULL,
    ip_address      VARCHAR(46)  NOT NULL,
    version         VARCHAR(32)  NOT NULL,
    name            VARCHAR(64)  NOT NULL,
    information     VARCHAR(128) NOT NULL,
    PRIMARY KEY  (id, server_id)
    );

CREATE TABLE location
    (
    id              SERIAL          NOT NULL,
    server_id       INT8            NOT NULL,
    name            VARCHAR(128)    NOT NULL,
    PRIMARY KEY  (id, server_id)
    );

CREATE TABLE data
    (
    id              INT8        NOT NULL,
    server_id       INT4        NOT NULL,
    "user"          TEXT        NOT NULL,
    full_log        TEXT        NOT NULL,
    PRIMARY KEY  (id, server_id)
    );

CREATE TABLE alert
    (
     id             bigserial   NOT NULL,
    server_id       INT4        NOT NULL,
    rule_id         INT8        NOT NULL,
    level           INT2,
    timestamp       INT8        NOT NULL,
    location_id     INT4        NOT NULL,
    src_ip          VARCHAR(46),
    dst_ip          VARCHAR(46),
    src_port        INT4,
    dst_port        INT4,
    alertid         TEXT        DEFAULT NULL,
    "user"          TEXT,
    full_log        TEXT        NOT NULL,
    is_hidden       INT2        NOT NULL DEFAULT '0',
    tld             VARCHAR(32)  NOT NULL DEFAULT '',
    PRIMARY KEY (id, server_id)
    );
CREATE INDEX alertid on alert(alertid);
CREATE INDEX alert_level on alert(level);
CREATE INDEX timestamp on alert(timestamp);
CREATE INDEX alert_rule_id on alert(rule_id);
CREATE INDEX src_ip on alert(src_ip);
CREATE INDEX tld on alert(tld);

COMMIT;