com.mozilla.secops.parser

Class OpenSSH

java.lang.Object

com.mozilla.secops.parser.PayloadBase

com.mozilla.secops.parser.SourcePayloadBase

com.mozilla.secops.parser.OpenSSH

All Implemented Interfaces:

Serializable

public class OpenSSH
extends SourcePayloadBase
implements Serializable

Payload parser for OpenSSH log data

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
OpenSSH() Construct matcher object.
OpenSSH(String input, Event e, com.mozilla.secops.parser.ParserState state) Construct parser object.

Method Summary

Modifier and Type	Method and Description
String	eventStringValue(EventFilterPayload.StringProperty property) Return a given String payload field value based on the supplied field identifier
String	getAuthMethod() Get authentication method
Payload.PayloadType	getType() Get payload type.
String	getUser() Get username
Boolean	matcher(String input, com.mozilla.secops.parser.ParserState state) Apply matcher.

Methods inherited from class com.mozilla.secops.parser.SourcePayloadBase

getSourceAddress, getSourceAddressAsn, getSourceAddressAsOrg, getSourceAddressCity, getSourceAddressCountry, getSourceAddressIsp, getSourceAddressLatitude, getSourceAddressLongitude, getSourceAddressTimeZone, setSourceAddress, setSourceAddress

Methods inherited from class com.mozilla.secops.parser.PayloadBase

eventIntegerValue

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OpenSSH

public OpenSSH()

Construct matcher object.

OpenSSH

public OpenSSH(String input,
               Event e,
               com.mozilla.secops.parser.ParserState state)

Construct parser object.

Parameters:

input - Input string.

e - Parent Event.

state - State

Method Detail

matcher

public Boolean matcher(String input,
                       com.mozilla.secops.parser.ParserState state)

Description copied from class: PayloadBase

Apply matcher.

Overrides:

matcher in class PayloadBase

Parameters:

input - Input string.

state - ParserState

Returns:

True if matcher matches.

getType

public Payload.PayloadType getType()

Description copied from class: PayloadBase

Get payload type.

Overrides:

getType in class PayloadBase

Returns:

Payload.PayloadType

getUser

public String getUser()

Get username

Returns:

Username

getAuthMethod

public String getAuthMethod()

Get authentication method

Returns:

Authentication method

eventStringValue

public String eventStringValue(EventFilterPayload.StringProperty property)

Description copied from class: PayloadBase

Return a given String payload field value based on the supplied field identifier

Overrides:

eventStringValue in class PayloadBase

Parameters:

property - EventFilterPayload.StringProperty

Returns:

String value or null