- AbstractAuditEventReader - Class in org.jwall.web.audit.io
-
This abstract class implements the basic methods of an AuditEventReader.
- AbstractAuditEventReader(InputStream) - Constructor for class org.jwall.web.audit.io.AbstractAuditEventReader
-
This constructor creates a new AbstractAuditEventReader by initializing the
basic reader instance to read from the given stream.
- AbstractAuditEventReader(Reader) - Constructor for class org.jwall.web.audit.io.AbstractAuditEventReader
-
This constructor creates a new AbstractAuditEventReader by initializing the
basic reader instance to read from the given stream.
- AbstractCondition - Class in org.jwall.web.audit.rules.operators
-
The abstract stuff of a condition instance.
- AbstractCondition(String, String) - Constructor for class org.jwall.web.audit.rules.operators.AbstractCondition
-
- AbstractEventAction - Class in org.jwall.web.audit.rules.actions
-
This class implements an abstract event-action.
- AbstractEventAction() - Constructor for class org.jwall.web.audit.rules.actions.AbstractEventAction
-
- AbstractEventProcessor<E extends Event> - Class in org.jwall.audit.processor
-
- AbstractEventProcessor(Double) - Constructor for class org.jwall.audit.processor.AbstractEventProcessor
-
- AbstractList<E> - Class in org.jwall.audit.script.utils
-
- AbstractList() - Constructor for class org.jwall.audit.script.utils.AbstractList
-
- AbstractSessionTracker - Class in org.jwall.web.audit.session
-
This class is an abstract implementation of a simple session tracker and
provides the basis for the tracker HeuristicSessionTracker and
CookieSessionTracker.
- AbstractSessionTracker() - Constructor for class org.jwall.web.audit.session.AbstractSessionTracker
-
This creates a new instance of this class which is based on the default
timeout of 2 hours ( = 7200000 ms ).
- AbstractSessionTracker(long) - Constructor for class org.jwall.web.audit.session.AbstractSessionTracker
-
This initializes the tracker with the given session-timeout.
- ACCEPT - Static variable in class org.jwall.web.http.HttpRequest
-
- ACCEPT_CHARSET - Static variable in class org.jwall.web.http.HttpRequest
-
- ACCEPT_ENCODING - Static variable in class org.jwall.web.http.HttpRequest
-
- ACCEPT_LANGUAGE - Static variable in class org.jwall.web.http.HttpRequest
-
- ACCEPT_RANGES - Static variable in class org.jwall.web.http.HttpResponse
-
- AccessLogAuditReader - Class in org.jwall.web.audit.io
-
This simple class creates small AuditEvent objects from a line of an
web-server access log.
- AccessLogAuditReader(File, boolean) - Constructor for class org.jwall.web.audit.io.AccessLogAuditReader
-
This creates an instance of this class that reads from the
given file accessLogFile.
- AccessLogAuditReader(File) - Constructor for class org.jwall.web.audit.io.AccessLogAuditReader
-
This creates an instance of this class that reads from the
given file accessLogFile.
- AccessLogAuditReader(InputStream) - Constructor for class org.jwall.web.audit.io.AccessLogAuditReader
-
- AccessLogParser - Class in org.jwall.log.io
-
- AccessLogParser() - Constructor for class org.jwall.log.io.AccessLogParser
-
- AccessLogParser.Tokenizer - Class in org.jwall.log.io
-
- AccessLogParser.Tokenizer(String) - Constructor for class org.jwall.log.io.AccessLogParser.Tokenizer
-
- AccessLogReader - Class in org.jwall.log.io
-
This reader reads lines from a source and parses each line with the
AccessLogParser implementation.
- AccessLogReader(InputStream) - Constructor for class org.jwall.log.io.AccessLogReader
-
- AccessLogReader(Reader) - Constructor for class org.jwall.log.io.AccessLogReader
-
- activeSessions - Variable in class org.jwall.web.audit.session.AbstractSessionTracker
-
- add(E) - Method in class org.jwall.audit.script.utils.AbstractList
-
- add(int, E) - Method in class org.jwall.audit.script.utils.AbstractList
-
- add(ScriptEvent) - Method in class org.jwall.audit.script.utils.ListIteratorImpl
-
- add(AuditEvent) - Method in class org.jwall.web.audit.AuditEventDispatcher
-
Deprecated.
The same functionality is now provided by enqueueEvent(AuditEvent).
- add(Match) - Method in class org.jwall.web.audit.filter.AuditEventFilter
-
- add(AuditEventMatch) - Method in class org.jwall.web.audit.filter.AuditEventFilter
-
- add(AuditEvent) - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
- add(Collection<AuditEvent>) - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
- add(AuditEvent) - Method in class org.jwall.web.audit.io.BufferedAuditEventWriter
-
Add a new event to the list of events that need to be written to disk.
- add(Condition) - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- add(EventAction) - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- addAlias(String, String) - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
This method lets you specify an alias for a webserver so that
events having this alias in their Host:-header will
be written to the same file as the ones with the server-name in
the Host-header.
- addAll(Collection<? extends E>) - Method in class org.jwall.audit.script.utils.AbstractList
-
- addAll(int, Collection<? extends E>) - Method in class org.jwall.audit.script.utils.AbstractList
-
- addAll(Collection<AuditEvent>) - Method in class org.jwall.web.audit.io.BufferedAuditEventWriter
-
This method can be used to add a collection of events to the queue.
- addAuditEventListener(AuditEventListener) - Method in class org.jwall.web.audit.AuditEventDispatcher
-
Register another listener which is to be notified if
another event has been created.
- addEvent(AuditEvent) - Method in class org.jwall.web.audit.session.Session
-
- addEventListener(AuditEventListener) - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
- addEventListener(AuditEventListener) - Method in class org.jwall.web.audit.net.NetworkAuditEventSource
-
This method adds the given listener to the list of listeners to be notified
of new events.
- addEvents(Collection<AuditEvent>) - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
- addListener(AuditEventListener) - Method in class org.jwall.web.audit.net.AuditEventStreamHandler
-
- addObfuscator(Obfuscator) - Method in class org.jwall.web.audit.AuditEventObfuscatorChain
-
This adds a new obfuscator to the list of this chain.
- addObfuscator(Obfuscator) - Method in class org.jwall.web.audit.AuditEventObfuscatorPipe
-
- addValue(Map<String, List<String>>, String, String) - Static method in class org.jwall.web.audit.DefaultAuditEventFactory
-
- addValue(Map<String, List<String>>, String, String) - Static method in class org.jwall.web.audit.io.AuditEventParser
-
- addVariables(Map<String, String>) - Method in class org.jwall.web.audit.util.MacroExpander
-
- addVariables(Map<String, String>) - Method in class org.jwall.web.audit.util.VariableContext
-
- AGE - Static variable in interface org.jwall.web.audit.AuditEvent
-
This is a special variable, which refers to the age of the event in
milliseconds with regard to the moment the variable is accessed (i.e.
- AGE - Static variable in class org.jwall.web.http.HttpResponse
-
- ALLOW - Static variable in class org.jwall.web.http.HttpHeader
-
- APACHE_ACCESS_LOG - Static variable in class org.jwall.web.audit.io.AuditFormat
-
- ARGS - Static variable in class org.jwall.web.audit.ModSecurity
-
- ARGS_GET - Static variable in class org.jwall.web.audit.ModSecurity
-
- ARGS_GET_NAMES - Static variable in class org.jwall.web.audit.ModSecurity
-
- ARGS_NAMES - Static variable in class org.jwall.web.audit.ModSecurity
-
- ARGS_POST - Static variable in class org.jwall.web.audit.ModSecurity
-
- ARGS_POST_NAMES - Static variable in class org.jwall.web.audit.ModSecurity
-
- ARGUMENT_SEPARATOR - Static variable in class org.jwall.web.audit.ModSecurity
-
the regular expression that is used to split the uri and query-string
- atEOF() - Method in class org.jwall.web.audit.AuditEventQueue
-
- atEOF() - Method in class org.jwall.web.audit.io.AbstractAuditEventReader
-
- atEOF() - Method in interface org.jwall.web.audit.io.AuditEventReader
-
- atEOF() - Method in class org.jwall.web.audit.io.ConcurrentDirectoryReader
-
- atEOF() - Method in class org.jwall.web.audit.io.IronBeeAuditReader
-
- AUDIT_EVENT_FACTORY_CLASS - Static variable in interface org.jwall.web.audit.AuditEventFactory
-
This is the system property to define the class which shall be used by readers
- AUDIT_LOG_TRAILER - Static variable in class org.jwall.web.audit.ModSecurity
-
- AuditData - Class in org.jwall.web.audit
-
- AuditData() - Constructor for class org.jwall.web.audit.AuditData
-
- AuditData(AuditEvent) - Constructor for class org.jwall.web.audit.AuditData
-
- AuditEvent - Interface in org.jwall.web.audit
-
This interface defines an abstract audit-event.
- AuditEventConsoleSender - Class in org.jwall.web.audit.net
-
This class implements a simple socket-handler which provides easy
injection of audit-events to the modsecurity-console.
- AuditEventConsoleSender(String, int, String, String) - Constructor for class org.jwall.web.audit.net.AuditEventConsoleSender
-
This method creates a new console sender that sends all arriving
events to the given host host using login
and password for authentifaction.
- AuditEventConsoleSender.ZeroTrustManager - Class in org.jwall.web.audit.net
-
- AuditEventConsoleSender.ZeroTrustManager() - Constructor for class org.jwall.web.audit.net.AuditEventConsoleSender.ZeroTrustManager
-
- AuditEventDateMatch - Class in org.jwall.web.audit.filter
-
This class implements a date match of an event.
- AuditEventDateMatch(Operator, Date) - Constructor for class org.jwall.web.audit.filter.AuditEventDateMatch
-
- AuditEventDateMatch(String, Operator, Date) - Constructor for class org.jwall.web.audit.filter.AuditEventDateMatch
-
- AuditEventDispatcher - Class in org.jwall.web.audit
-
This class implements a dispatcher for audit-events.
- AuditEventDispatcher() - Constructor for class org.jwall.web.audit.AuditEventDispatcher
-
This constructor creates a new instance which does externally receive events
from other creators and dispatches them to registered listeners.
- AuditEventDispatcher(AuditEventReader) - Constructor for class org.jwall.web.audit.AuditEventDispatcher
-
This constructor creates a new dispatcher which reads events from the given
AuditEventReader.
- AuditEventFactory - Interface in org.jwall.web.audit
-
This interface defines the methods that need to be provided by a factory class
that creates audit-event instances.
- AuditEventFilter - Class in org.jwall.web.audit.filter
-
- AuditEventFilter() - Constructor for class org.jwall.web.audit.filter.AuditEventFilter
-
- AuditEventIterator - Class in org.jwall.web.audit.io
-
Creates a new Iterator for walking over a set of AuditEvent objects.
- AuditEventIterator(AuditEventReader) - Constructor for class org.jwall.web.audit.io.AuditEventIterator
-
- AuditEventListener - Interface in org.jwall.web.audit
-
This interface defines the methods all AuditEvent persistence-classes
have to implement.
- AuditEventMatch - Class in org.jwall.web.audit.filter
-
This class implements the most generic ModSecurity-like match.
- AuditEventMatch() - Constructor for class org.jwall.web.audit.filter.AuditEventMatch
-
- AuditEventMatch(String) - Constructor for class org.jwall.web.audit.filter.AuditEventMatch
-
- AuditEventMatch(String, String) - Constructor for class org.jwall.web.audit.filter.AuditEventMatch
-
- AuditEventMatch(String, Operator, String) - Constructor for class org.jwall.web.audit.filter.AuditEventMatch
-
- AuditEventMessage - Interface in org.jwall.web.audit
-
- AuditEventMLogcReceiver - Class in org.jwall.web.audit.net
-
This class implements a simple SSL based server component for receiving ModSecurity
audit events from the mlogc application.
- AuditEventMLogcReceiver() - Constructor for class org.jwall.web.audit.net.AuditEventMLogcReceiver
-
Create a new instance of this class.
- AuditEventObfuscatorChain - Class in org.jwall.web.audit
-
This class implements a chain of obfuscators.
- AuditEventObfuscatorChain() - Constructor for class org.jwall.web.audit.AuditEventObfuscatorChain
-
Create a new obfuscator chain.
- AuditEventObfuscatorPipe - Class in org.jwall.web.audit
-
- AuditEventObfuscatorPipe(AuditEventListener) - Constructor for class org.jwall.web.audit.AuditEventObfuscatorPipe
-
- AuditEventParser - Class in org.jwall.web.audit.io
-
- AuditEventParser() - Constructor for class org.jwall.web.audit.io.AuditEventParser
-
- AuditEventProcessorFinder - Class in org.jwall.audit.processor
-
This class reads an XML file of AuditEventProcessors, instantiates each
processor and deploys it to the local EventProcessor pipeline.
- AuditEventProcessorFinder() - Constructor for class org.jwall.audit.processor.AuditEventProcessorFinder
-
- AuditEventProcessorPipeline - Class in org.jwall.web.audit
-
This singleton class encapsulates a global, static queue of event processor
instances.
- AuditEventProcessorPipeline() - Constructor for class org.jwall.web.audit.AuditEventProcessorPipeline
-
- AuditEventProcessorPipeline.Priority - Class in org.jwall.web.audit
-
- AuditEventProcessorPipeline.Priority(Map<EventProcessor<AuditEvent>, Double>) - Constructor for class org.jwall.web.audit.AuditEventProcessorPipeline.Priority
-
- AuditEventQueue - Class in org.jwall.web.audit
-
A simple queue which holds some audit-events.
- AuditEventQueue() - Constructor for class org.jwall.web.audit.AuditEventQueue
-
This creates new empty queue for holding audit events.
- AuditEventQueue(Collection<AuditEvent>) - Constructor for class org.jwall.web.audit.AuditEventQueue
-
This creates a new queue which is initially filled with the
given set of events.
- AuditEventReader - Interface in org.jwall.web.audit.io
-
This interface defines the methods of an abstract event-reader.
- AuditEventReceiver - Class in org.jwall.web.audit.net
-
- AuditEventReceiver() - Constructor for class org.jwall.web.audit.net.AuditEventReceiver
-
- AuditEventRule - Class in org.jwall.web.audit.rules
-
This class implements a simple rule, which can be applied to an audit-event and may
trigger a set of actions.
- AuditEventRule() - Constructor for class org.jwall.web.audit.rules.AuditEventRule
-
- AuditEventRuleEngine - Class in org.jwall.web.audit.rules
-
A rule engine for handling audit-event data.
- AuditEventRuleEngine() - Constructor for class org.jwall.web.audit.rules.AuditEventRuleEngine
-
- AuditEventSocketReceiver - Class in org.jwall.web.audit.net
-
- AuditEventSocketReceiver(int) - Constructor for class org.jwall.web.audit.net.AuditEventSocketReceiver
-
- AuditEventSocketReceiver.AuditEventReaderThread - Class in org.jwall.web.audit.net
-
- AuditEventSocketReceiver.AuditEventReaderThread(Socket) - Constructor for class org.jwall.web.audit.net.AuditEventSocketReceiver.AuditEventReaderThread
-
- AuditEventSource - Interface in org.jwall.web.audit.io
-
This interface defines the methods which all sources of AuditEvent-objects have
to implement.
- AuditEventStreamHandler - Class in org.jwall.audit.server
-
- AuditEventStreamHandler(SyslogReceiver, Socket, boolean) - Constructor for class org.jwall.audit.server.AuditEventStreamHandler
-
- AuditEventStreamHandler - Class in org.jwall.web.audit.net
-
- AuditEventStreamHandler(SyslogReceiverThread, Socket, boolean, boolean) - Constructor for class org.jwall.web.audit.net.AuditEventStreamHandler
-
- AuditEventType - Enum in org.jwall.web.audit
-
This enumeration enlists the event formats supported by the storage
engine.
- AuditEventURLConnectionSender - Class in org.jwall.web.audit.net
-
This class implements a simple socket-handler which provides easy
injection of audit-events to the modsecurity-console.
- AuditEventURLConnectionSender(String, int, String, String) - Constructor for class org.jwall.web.audit.net.AuditEventURLConnectionSender
-
This method creates a new console sender that sends all arriving
events to the given host host using login
and password for authentifaction.
- AuditEventURLConnectionSender.ZeroTrustManager - Class in org.jwall.web.audit.net
-
- AuditEventURLConnectionSender.ZeroTrustManager() - Constructor for class org.jwall.web.audit.net.AuditEventURLConnectionSender.ZeroTrustManager
-
- AuditEventView - Interface in org.jwall.web.audit
-
This interface defines all method that are accessible by a user for
investigating events contained in an event store.
- AuditEventWriter - Interface in org.jwall.web.audit.io
-
This interface defines the methods all AuditEvent persistence-classes
have to implement.
- AuditFormat - Class in org.jwall.web.audit.io
-
This class defines several constants for AuditLog file formats.
- AuditFormat() - Constructor for class org.jwall.web.audit.io.AuditFormat
-
- AuditFormatException - Exception in org.jwall.web.audit.io
-
Exceptions of this class are thrown in case of incompatible formats of
audit-events or files which is tried to read from.
- AuditFormatException(String) - Constructor for exception org.jwall.web.audit.io.AuditFormatException
-
This constructor creates a new instance of this class using the given
error message.
- AuditLogFileWriter - Class in org.jwall.web.audit.io
-
This is a persistence-thread which listens for events and writes them to a file.
- AuditLogFileWriter(File, int, String) - Constructor for class org.jwall.web.audit.io.AuditLogFileWriter
-
This constructor creates a new instance of this class which writes events to
several files grouped by a request-property that is given by groupBy.
- AuditLogFileWriter(File, boolean, int) - Constructor for class org.jwall.web.audit.io.AuditLogFileWriter
-
- AuditServer - Class in org.jwall
-
This class encapsulates the AuditEvent server.
- AuditServer() - Constructor for class org.jwall.AuditServer
-
- AUTH_TYPE - Static variable in class org.jwall.web.audit.ModSecurity
-
- authenticate(Socket) - Method in interface org.jwall.web.audit.net.SocketAuthenticator
-
- authenticate(Socket) - Method in class org.jwall.web.audit.net.SyslogReceiverThread
-
- authenticate(String, String) - Method in interface org.jwall.web.audit.util.Authenticator
-
This method is used to authenticate the given user (login) with
the specified password.
- authenticate(String, String) - Method in class org.jwall.web.audit.util.SimplePasswordAuthenticator
-
This method checks the given login and password to the internal user-information.
- Authenticator - Interface in org.jwall.web.audit.util
-
This interface defines a simple authentication and group-authorization
module.
- AUTHORIZATION - Static variable in class org.jwall.web.http.HttpRequest
-
- available() - Method in class org.jwall.log.io.SequentialFileInputStream
-
- Cache<V> - Class in org.jwall.web.audit.util
-
- Cache(int) - Constructor for class org.jwall.web.audit.util.Cache
-
- CACHE_CONTROL - Static variable in class org.jwall.web.http.HttpHeader
-
- CASE_INSENSITIVE_HEADERS - Static variable in class org.jwall.web.http.HttpHeader
-
- CASE_INSENSITIVE_PREFIXES - Static variable in class org.jwall.web.audit.VariableMapping
-
- channel - Variable in class org.jwall.web.http.HttpResponse
-
The http stream over which this response has been received
- checkClientTrusted(X509Certificate[], String) - Method in class org.jwall.web.audit.net.AuditEventConsoleSender.ZeroTrustManager
-
- checkClientTrusted(X509Certificate[], String) - Method in class org.jwall.web.audit.net.AuditEventURLConnectionSender.ZeroTrustManager
-
- checkCommand() - Method in class org.jwall.web.audit.net.NetworkClientWorkerThread
-
- checkProperties(File) - Static method in class org.jwall.Collector
-
This method checks all the properties, found in the given file
pf.
- checkServerTrusted(X509Certificate[], String) - Method in class org.jwall.web.audit.net.AuditEventConsoleSender.ZeroTrustManager
-
- checkServerTrusted(X509Certificate[], String) - Method in class org.jwall.web.audit.net.AuditEventURLConnectionSender.ZeroTrustManager
-
- chop(String) - Method in class org.jwall.web.audit.net.SyslogAuditEventStream
-
- chunkState() - Method in class org.jwall.web.http.nio.HttpResponseChannel
-
- CLASSES - Static variable in class org.jwall.web.audit.rules.AuditEventRule
-
- clear() - Method in class org.jwall.audit.script.EventList
-
- clear() - Method in class org.jwall.audit.script.utils.AbstractList
-
- CLIENT_POLL_TIME - Static variable in class org.jwall.web.audit.net.NetworkEventServer
-
- ClientIPObfuscation - Class in org.jwall.web.audit.util
-
This class implements a simple client IP address obfuscation.
- ClientIPObfuscation() - Constructor for class org.jwall.web.audit.util.ClientIPObfuscation
-
- close() - Method in class org.jwall.web.audit.AuditEventDispatcher
-
Closes this dispatcher by closing the underlying reader (if any) and terminating
the dispatch thread.
- close() - Method in class org.jwall.web.audit.AuditEventQueue
-
- close() - Method in class org.jwall.web.audit.io.AbstractAuditEventReader
-
- close() - Method in interface org.jwall.web.audit.io.AuditEventReader
-
- close() - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
- close() - Method in class org.jwall.web.audit.io.BufferedAuditEventWriter
-
This method sets the finish-signal for this writer instance.
- close() - Method in class org.jwall.web.audit.io.ConcurrentAuditReader
-
- close() - Method in class org.jwall.web.audit.io.ConcurrentDirectoryReader
-
- close() - Method in class org.jwall.web.audit.io.IronBeeAuditReader
-
- close() - Method in class org.jwall.web.audit.io.ModSecurity2AuditWriter
-
- close() - Method in class org.jwall.web.audit.io.ModSecurityAuditStream
-
- close() - Method in class org.jwall.web.audit.io.SequentialFileReader
-
- close() - Method in class org.jwall.web.audit.net.AuditEventStreamHandler
-
- close() - Method in class org.jwall.web.audit.net.NetworkAuditEventSource
-
This method tries to cleanly unregister from the server and close the tcp connection.
- close() - Method in class org.jwall.web.http.nio.BufferedReadableByteChannel
-
- close() - Method in class org.jwall.web.http.nio.HttpMessageChannel
-
This method closes the message-channel and also closes the
underlying byte-channel.
- close() - Method in class org.jwall.web.http.nio.HttpRequestChannel
-
- closeSocketConnection() - Method in class org.jwall.web.audit.net.AuditEventConsoleSender
-
- COLLECTION_SIZE_OPERATOR - Static variable in class org.jwall.web.audit.ModSecurity
-
This is the prefix-string which denotes a collections element count
rather than the collections values
- COLLECTIONS - Static variable in class org.jwall.web.audit.ModSecurity
-
- Collector - Class in org.jwall
-
This is a small collector-tool that listens for events from
the ModSecurity audit-engine and sends them back to a running
ModSecurity Console.
- Collector() - Constructor for class org.jwall.Collector
-
- COLLECTOR_CONCURRENT_INDEX - Static variable in class org.jwall.Collector
-
- COLLECTOR_CONCURRENT_LOG - Static variable in class org.jwall.Collector
-
- COLLECTOR_CONSOLE_PASSWORD - Static variable in class org.jwall.Collector
-
- COLLECTOR_CONSOLE_URL - Static variable in class org.jwall.Collector
-
- COLLECTOR_CONSOLE_USER - Static variable in class org.jwall.Collector
-
- COLLECTOR_SEND_COMPLETE_LOG - Static variable in class org.jwall.Collector
-
- COLLECTOR_SERIAL_LOG - Static variable in class org.jwall.Collector
-
- compare(T, T) - Method in class org.jwall.log.LogMessageProcessorPipeline.Order
-
- compare(EventProcessor<AuditEvent>, EventProcessor<AuditEvent>) - Method in class org.jwall.web.audit.AuditEventProcessorPipeline.Priority
-
- compareTo(AuditEvent) - Method in interface org.jwall.web.audit.AuditEvent
-
- compareTo(AuditEvent) - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- compareTo(AuditEvent) - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- compareTo(ModSecurityAuditEvent) - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- compareTo(Session) - Method in class org.jwall.web.audit.session.Session
-
This compares the session to s.
- compile(String) - Static method in class org.jwall.web.audit.filter.FilterCompiler
-
- compile(String, Collection<String>) - Static method in class org.jwall.web.audit.filter.FilterCompiler
-
- compile(String, Set<String>, Set<Operator>) - Static method in class org.jwall.web.audit.filter.FilterCompiler
-
- compile(String, Set<String>, Set<Operator>, Set<BooleanOperator>) - Static method in class org.jwall.web.audit.filter.FilterCompiler
-
- compile(FilterExpression) - Static method in class org.jwall.web.audit.filter.FilterCompiler
-
- CompressionHandler - Class in org.jwall.web.http.nio
-
This is a simple compression-handler that handles gzip-compressed message
payloads.
- CompressionHandler() - Constructor for class org.jwall.web.http.nio.CompressionHandler
-
- ConcurrentAuditReader - Class in org.jwall.web.audit.io
-
This class read the index-file of a concurrent auditlog and
creates audit-events from the appopriate event-files, if
available.
- ConcurrentAuditReader(File, File, boolean) - Constructor for class org.jwall.web.audit.io.ConcurrentAuditReader
-
This constructor creates a new concurrent audit-reader that reads from the
given index file and expects the audit data-files to exist relative to the
given data-directory.
- ConcurrentAuditReader(InputStream, File) - Constructor for class org.jwall.web.audit.io.ConcurrentAuditReader
-
- ConcurrentAuditReader(File, File) - Constructor for class org.jwall.web.audit.io.ConcurrentAuditReader
-
- ConcurrentAuditReader(File, boolean) - Constructor for class org.jwall.web.audit.io.ConcurrentAuditReader
-
This constructor creates a new concurrent audit-reader that
listens on the index file in the given data-directory.
- ConcurrentAuditReader(File) - Constructor for class org.jwall.web.audit.io.ConcurrentAuditReader
-
- ConcurrentAuditWriter - Class in org.jwall.web.audit.io
-
This class implements a simple writer that writes audit-events in
the concurrent log format of modsecurity.
- ConcurrentAuditWriter(File, File) - Constructor for class org.jwall.web.audit.io.ConcurrentAuditWriter
-
This constructor creates a new instance of the class that writes all events to
files within the given directory baseDir.
- ConcurrentAuditWriter(File) - Constructor for class org.jwall.web.audit.io.ConcurrentAuditWriter
-
Create a new audit-writer that writes events into sub-directories below the given
directory base according to their date.
- ConcurrentDirectoryReader - Class in org.jwall.web.audit.io
-
This is a simple directory reader which recursively scans all files from a specified directory
and tries to parse audit-events from them.
- ConcurrentDirectoryReader(File) - Constructor for class org.jwall.web.audit.io.ConcurrentDirectoryReader
-
Create a new directory reader, which reads files from the specified directory.
- condition - Variable in class org.jwall.audit.Match
-
- Condition - Interface in org.jwall.web.audit.rules
-
This is the basic interface which needs to be implemented by all
rule conditions.
- ConditionEQ - Class in org.jwall.web.audit.rules.operators
-
This condition checks for equality.
- ConditionEQ(String, String) - Constructor for class org.jwall.web.audit.rules.operators.ConditionEQ
-
- ConditionGE - Class in org.jwall.web.audit.rules.operators
-
- ConditionGE(String, String) - Constructor for class org.jwall.web.audit.rules.operators.ConditionGE
-
- ConditionGT - Class in org.jwall.web.audit.rules.operators
-
- ConditionGT(String, String) - Constructor for class org.jwall.web.audit.rules.operators.ConditionGT
-
- ConditionIN - Class in org.jwall.web.audit.rules.operators
-
This class implements a condition called @in, which basically matches,
if one of a set of SX operators matches.
- ConditionIN(String, String) - Constructor for class org.jwall.web.audit.rules.operators.ConditionIN
-
- ConditionLE - Class in org.jwall.web.audit.rules.operators
-
- ConditionLE(String, String) - Constructor for class org.jwall.web.audit.rules.operators.ConditionLE
-
- ConditionLT - Class in org.jwall.web.audit.rules.operators
-
- ConditionLT(String, String) - Constructor for class org.jwall.web.audit.rules.operators.ConditionLT
-
- ConditionPM - Class in org.jwall.web.audit.rules.operators
-
- ConditionPM(String, String) - Constructor for class org.jwall.web.audit.rules.operators.ConditionPM
-
- ConditionRX - Class in org.jwall.web.audit.rules.operators
-
Instances of this class match all values for the given variable against
the specified regular expression.
- ConditionRX(String, String) - Constructor for class org.jwall.web.audit.rules.operators.ConditionRX
-
- Conditions - Class in org.jwall.web.audit.rules.operators
-
This class describes a list of matches which are conditions for an event-rule
to fire.
- Conditions() - Constructor for class org.jwall.web.audit.rules.operators.Conditions
-
- ConditionSX - Class in org.jwall.web.audit.rules.operators
-
Instances of this class match all values for the given variable against the
specified simple expression.
- ConditionSX(String, String) - Constructor for class org.jwall.web.audit.rules.operators.ConditionSX
-
- CONFIDENCE - Static variable in class org.jwall.web.audit.IronBeeEventMessage
-
- connect() - Method in class org.jwall.web.audit.GELFSender
-
- connect(String, String) - Method in class org.jwall.web.audit.net.NetworkAuditEventSource
-
This method is used to connect this client side source to an audit event server.
- CONNECTION - Static variable in class org.jwall.web.http.HttpHeader
-
- CONSOLE_CONNECTION_KEEP_ALIVE - Static variable in class org.jwall.web.audit.net.AuditEventConsoleSender
-
- CONSOLE_CONNECTION_KEEP_ALIVE - Static variable in class org.jwall.web.audit.net.AuditEventURLConnectionSender
-
- CONSOLE_CONNECTION_SSL - Static variable in class org.jwall.web.audit.net.AuditEventConsoleSender
-
- CONSOLE_HOST - Static variable in class org.jwall.web.audit.net.AuditEventConsoleSender
-
- CONSOLE_HOST - Static variable in class org.jwall.web.audit.net.AuditEventURLConnectionSender
-
- CONSOLE_PASS - Static variable in class org.jwall.web.audit.net.AuditEventConsoleSender
-
- CONSOLE_PASS - Static variable in class org.jwall.web.audit.net.AuditEventURLConnectionSender
-
- CONSOLE_PORT - Static variable in class org.jwall.web.audit.net.AuditEventConsoleSender
-
- CONSOLE_PORT - Static variable in class org.jwall.web.audit.net.AuditEventURLConnectionSender
-
- CONSOLE_URI - Static variable in class org.jwall.web.audit.net.AuditEventConsoleSender
-
the uri of the receiver servlet
- CONSOLE_URI - Static variable in class org.jwall.web.audit.net.AuditEventURLConnectionSender
-
the uri of the receiver servlet
- CONSOLE_USER - Static variable in class org.jwall.web.audit.net.AuditEventConsoleSender
-
- CONSOLE_USER - Static variable in class org.jwall.web.audit.net.AuditEventURLConnectionSender
-
- contains(Object) - Method in class org.jwall.audit.script.utils.AbstractList
-
- contains(AuditEvent) - Method in interface org.jwall.web.audit.AuditEventView
-
- Contains - Class in org.jwall.web.audit.rules.operators
-
This condition checks for equality.
- Contains(String, String) - Constructor for class org.jwall.web.audit.rules.operators.Contains
-
- containsAll(Collection<?>) - Method in class org.jwall.audit.script.utils.AbstractList
-
- containsKey(String) - Method in class org.jwall.web.audit.util.Cache
-
- CONTENT_ENCODING - Static variable in class org.jwall.web.http.HttpHeader
-
- CONTENT_LANGUAGE - Static variable in class org.jwall.web.http.HttpHeader
-
- CONTENT_LENGTH - Static variable in class org.jwall.web.http.HttpHeader
-
- CONTENT_LOCATION - Static variable in class org.jwall.web.http.HttpHeader
-
- CONTENT_MD5 - Static variable in class org.jwall.web.http.HttpHeader
-
- CONTENT_RANGE - Static variable in class org.jwall.web.http.HttpHeader
-
- CONTENT_TYPE - Static variable in class org.jwall.web.http.HttpHeader
-
- COOKIE_BASED - Static variable in class org.jwall.web.audit.session.Session
-
- CookieSessionTracker - Class in org.jwall.web.audit.session
-
This tracker creates a session-context wrt to a specific session-cookie.
- CookieSessionTracker(String) - Constructor for class org.jwall.web.audit.session.CookieSessionTracker
-
This tracker creates sessions on behalf of a id sent in the
request-cookie names cookieName.
- count(FilterExpression) - Method in interface org.jwall.audit.EventView
-
Returns the number of log-messages within this view which match the given
filter expression.
- count(String, FilterExpression) - Method in interface org.jwall.audit.EventView
-
Returns the counts of events grouped by the specified variable.
- count(String) - Method in class org.jwall.audit.script.ScriptEventView
-
- count(String, String) - Method in class org.jwall.audit.script.ScriptEventView
-
- count(String) - Method in class org.jwall.audit.script.utils.Counter
-
- count(AuditEventFilter) - Method in interface org.jwall.web.audit.AuditEventView
-
This method will return the number of events which match the given filter
filter AND the user-specific implicit filter expressions.
- Counter - Class in org.jwall.audit.script.utils
-
This is a very simple counter class that is provided to all scripts
and can be used to track the count of event properties when iterating
over multiple events.
- Counter() - Constructor for class org.jwall.audit.script.utils.Counter
-
- counter - Variable in class org.jwall.web.audit.io.AbstractAuditEventReader
-
A counter of all events read by this reader
- CR - Static variable in class org.jwall.web.http.HttpHeader
-
- create(String) - Method in class org.jwall.log.io.ParserGenerator
-
- createAuditEvent(String[], AuditEventType) - Method in interface org.jwall.web.audit.AuditEventFactory
-
Creates a new audit-event instance from the given section strings.
- createAuditEvent(String, String[], File, long, long, AuditEventType) - Method in interface org.jwall.web.audit.AuditEventFactory
-
- createAuditEvent(String[], AuditEventType) - Method in class org.jwall.web.audit.DefaultAuditEventFactory
-
- createAuditEvent(String, String[], File, long, long, AuditEventType) - Method in class org.jwall.web.audit.DefaultAuditEventFactory
-
- createAuditEventReader() - Static method in class org.jwall.Collector
-
This method is used to create an AuditEventReader that is
Bsed as the event-source.
- createCondition(FilterExpression) - Method in class org.jwall.web.audit.filter.FilterCompiler
-
- createCondition(Operator, String, String) - Static method in class org.jwall.web.audit.rules.operators.AbstractCondition
-
- createEvent(String) - Static method in class org.jwall.web.audit.io.AccessLogAuditReader
-
This method create an audit-event from the given access-line.
- createReader(String, boolean) - Static method in class org.jwall.web.audit.io.AuditFormat
-
This method creates the appropriate reader for a file, denoted by
filename.
- createReader(String, boolean) - Static method in class org.jwall.web.audit.util.RFICollector
-
- createSSLEventServer(File, String, int, Authenticator) - Static method in class org.jwall.web.audit.net.NetworkEventServer
-
- createSSLEventServer(InputStream, int, Authenticator) - Static method in class org.jwall.web.audit.net.NetworkEventServer
-
- createSSLEventServer(InputStream, String, int, Authenticator) - Static method in class org.jwall.web.audit.net.NetworkEventServer
-
This method creates a new NetworkEventServer that is based on an SSL-enabled server socket.
- createSSLSource(InputStream, String, String, int) - Static method in class org.jwall.web.audit.net.SSLNetworkAuditEventSource
-
This is the factory method to create a new SSL based network audit event source.
- createSummary(AuditEvent) - Static method in class org.jwall.web.audit.io.ConcurrentAuditWriter
-
This method creates a summary-string from the given audit-event.
- CRLF - Static variable in class org.jwall.web.http.HttpHeader
-
- CRLF_BUF - Static variable in class org.jwall.web.http.HttpHeader
-
- emit(Data) - Method in class org.jwall.web.audit.GELFSender
-
- encode(byte[]) - Method in class org.jwall.web.audit.util.Base64Codec
-
Encode a chunk of byte using Base64 encoding.
- endBodyPart() - Method in class org.jwall.web.audit.io.IronBeeAuditReader.IBEventHandler
-
- endHeader() - Method in class org.jwall.web.audit.io.IronBeeAuditReader.IBEventHandler
-
- endMessage() - Method in class org.jwall.web.audit.io.IronBeeAuditReader.IBEventHandler
-
- endMultipart() - Method in class org.jwall.web.audit.io.IronBeeAuditReader.IBEventHandler
-
- endOfLine() - Method in class org.jwall.log.io.AccessLogParser.Tokenizer
-
- endOfLine() - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- EndsWith - Class in org.jwall.web.audit.rules.operators
-
This condition checks for equality.
- EndsWith(String, String) - Constructor for class org.jwall.web.audit.rules.operators.EndsWith
-
- enqueueEvent(AuditEvent) - Method in class org.jwall.web.audit.AuditEventDispatcher
-
This method enqueues the given event into the list of events to be dispatched to
the registered listeners.
- ENV - Static variable in class org.jwall.web.audit.ModSecurity
-
- eofReached - Variable in class org.jwall.web.audit.io.AbstractAuditEventReader
-
A flag indicating if the end of file/stream has been reached
- epilogue(InputStream) - Method in class org.jwall.web.audit.io.IronBeeAuditReader.IBEventHandler
-
- EQ - Static variable in interface org.jwall.web.audit.rules.Condition
-
- equals(ModSecurityAuditEvent) - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- equals(Object) - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- equals(Object) - Method in class org.jwall.web.audit.session.Session
-
- ErrorLogParser - Class in org.jwall.log.io
-
A simple reader for Apache error log messages.
- ErrorLogParser() - Constructor for class org.jwall.log.io.ErrorLogParser
-
- ErrorLogReader - Class in org.jwall.log.io
-
A simple reader for Apache error log messages.
- ErrorLogReader(InputStream) - Constructor for class org.jwall.log.io.ErrorLogReader
-
- ErrorLogReader(Reader) - Constructor for class org.jwall.log.io.ErrorLogReader
-
- ETAG - Static variable in class org.jwall.web.http.HttpResponse
-
- eval(String) - Method in class org.jwall.web.audit.util.RFIController
-
- Event - Interface in org.jwall.audit
-
This interface defines methods common to all observable events.
- EVENT_ID - Static variable in interface org.jwall.web.audit.AuditEvent
-
- EVENT_ID - Static variable in class org.jwall.web.audit.IronBeeEventMessage
-
- EVENT_ID - Static variable in class org.jwall.web.audit.ModSecurity
-
- EVENT_PROCESSED - Static variable in interface org.jwall.audit.rules.RuleContext
-
- EVENT_TAGS - Static variable in interface org.jwall.web.audit.AuditEvent
-
The collection key for storing all tags for an event
- EVENT_URL - Static variable in interface org.jwall.web.audit.AuditEvent
-
- EventAction - Interface in org.jwall.web.audit.rules
-
This interface defines the basic methods which need to be provided by
event-actions.
- eventArrived(E) - Method in interface org.jwall.audit.EventListener
-
This method is called upon arrival of a new event of the given type.
- eventArrived(AuditEvent) - Method in class org.jwall.audit.server.AuditEventStreamHandler
-
- eventArrived(AuditEvent) - Method in interface org.jwall.web.audit.AuditEventListener
-
This method is called when a new event arrives at the listener.
- eventArrived(AuditEvent) - Method in class org.jwall.web.audit.AuditEventObfuscatorPipe
-
- eventArrived(AuditEvent) - Method in class org.jwall.web.audit.AuditEventQueue
-
This method will add the event evt to the queue.
- eventArrived(AuditEvent) - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
this will block if the queue is full !
- eventArrived(AuditEvent) - Method in class org.jwall.web.audit.io.BufferedAuditEventWriter
-
- eventArrived(AuditEvent) - Method in class org.jwall.web.audit.net.AuditEventConsoleSender
-
Simply send all arriving events to the configured console.
- eventArrived(String, AuditEvent) - Method in class org.jwall.web.audit.net.AuditEventMLogcReceiver
-
- eventArrived(AuditEvent) - Method in class org.jwall.web.audit.net.AuditEventMLogcReceiver
-
- eventArrived(AuditEvent) - Method in class org.jwall.web.audit.net.AuditEventStreamHandler
-
- eventArrived(AuditEvent) - Method in class org.jwall.web.audit.net.AuditEventURLConnectionSender
-
Simply send all arriving events to the configured console.
- eventArrived(AuditEvent) - Method in class org.jwall.web.audit.net.NetworkClientWorkerThread
-
- eventArrived(AuditEvent) - Method in class org.jwall.web.audit.net.NetworkEventServer
-
- eventArrived(AuditEvent) - Method in class org.jwall.web.audit.session.AbstractSessionTracker
-
This method tracks an AuditEvent object and creates a session if none
existed yet.
- eventArrived(AuditEvent) - Method in interface org.jwall.web.audit.session.SessionTracker
-
This method simply associates the give event with a session
or creates a new session if this event is not related to a previous
one.
- eventArrived(AuditEvent) - Method in class org.jwall.web.audit.util.RFICollector
-
- eventFactory - Variable in class org.jwall.web.audit.io.AbstractAuditEventReader
-
The factory used for creating audit-events
- eventId - Variable in class org.jwall.web.audit.ModSecurityAuditEvent
-
a unique event_id
- EventList<E extends Event> - Class in org.jwall.audit.script
-
This class implements a read-only list that is backed up
by an event view and a specific filter-expression.
- EventList(EventView<E>, FilterExpression) - Constructor for class org.jwall.audit.script.EventList
-
- EventListener<E extends Event> - Interface in org.jwall.audit
-
This interface provides a generic way to define a listener class, which
can be notified upon arrival of new events.
- EventProcessor<E extends Event> - Interface in org.jwall.audit
-
This interface defines an abstract event processor class which is able
to process events for a given generic type class.
- EventProcessorException - Exception in org.jwall.audit
-
Exceptions of this class are thrown by event processors.
- EventProcessorException() - Constructor for exception org.jwall.audit.EventProcessorException
-
- EventProcessorException(String) - Constructor for exception org.jwall.audit.EventProcessorException
-
- EventProcessorFinder - Class in org.jwall.audit
-
This class parses an XML document and checks for any Processor
or processor elements.
- EventProcessorFinder() - Constructor for class org.jwall.audit.EventProcessorFinder
-
- EventProcessorPipeline<E extends Event> - Interface in org.jwall.audit
-
This interface defines an abstract event processor pipeline.
- EventRule<E extends Event> - Interface in org.jwall.audit.rules
-
- EventRuleEngine<E extends Event> - Class in org.jwall.audit.rules
-
A simple engine that will sequentially process rules for an event.
- EventRuleEngine() - Constructor for class org.jwall.audit.rules.EventRuleEngine
-
- eventsArrived(Collection<AuditEvent>) - Method in class org.jwall.audit.server.AuditEventStreamHandler
-
- eventsArrived(Collection<AuditEvent>) - Method in interface org.jwall.web.audit.AuditEventListener
-
Deprecated.
- eventsArrived(Collection<AuditEvent>) - Method in class org.jwall.web.audit.AuditEventObfuscatorPipe
-
- eventsArrived(Collection<AuditEvent>) - Method in class org.jwall.web.audit.AuditEventQueue
-
- eventsArrived(Collection<AuditEvent>) - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
- eventsArrived(Collection<AuditEvent>) - Method in class org.jwall.web.audit.io.BufferedAuditEventWriter
-
- eventsArrived(Collection<AuditEvent>) - Method in class org.jwall.web.audit.net.AuditEventConsoleSender
-
- eventsArrived(Collection<AuditEvent>) - Method in class org.jwall.web.audit.net.AuditEventMLogcReceiver
-
- eventsArrived(Collection<AuditEvent>) - Method in class org.jwall.web.audit.net.AuditEventStreamHandler
-
- eventsArrived(Collection<AuditEvent>) - Method in class org.jwall.web.audit.net.AuditEventURLConnectionSender
-
- eventsArrived(Collection<AuditEvent>) - Method in class org.jwall.web.audit.net.NetworkClientWorkerThread
-
- eventsArrived(Collection<AuditEvent>) - Method in class org.jwall.web.audit.net.NetworkEventServer
-
- eventsArrived(Collection<AuditEvent>) - Method in class org.jwall.web.audit.session.AbstractSessionTracker
-
- eventsArrived(Collection<AuditEvent>) - Method in class org.jwall.web.audit.util.RFICollector
-
- eventsPending() - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
- EventType - Enum in org.jwall.audit
-
- EventView<E extends Event> - Interface in org.jwall.audit
-
This interface defines a view for a set of log events.
- evtCount - Static variable in class org.jwall.web.audit.DefaultAuditEventFactory
-
a count of all events created by this factory
- evtCount - Static variable in class org.jwall.web.audit.ModSecurityAuditEvent
-
a count of all events alive
- execute(EventRule<E>, E, Map<String, Object>) - Method in class org.jwall.audit.rules.EventRuleEngine
-
This method executes the actions of a rule for a given event.
- execute() - Method in class org.jwall.audit.script.ScriptRunner
-
- execute(EventRule<AuditEvent>, AuditEvent, Map<String, Object>) - Method in class org.jwall.web.audit.rules.AuditEventRuleEngine
-
- execute(Map<String, Object>, AuditEvent) - Method in interface org.jwall.web.audit.rules.EventAction
-
- expand(FilterExpressionList) - Static method in class org.jwall.web.audit.filter.FilterCompiler
-
- expand(String, AuditEvent) - Method in class org.jwall.web.audit.util.MacroExpander
-
- expand(String, Map<String, String>) - Static method in class org.jwall.web.audit.util.MacroExpander
-
- expand(String) - Method in class org.jwall.web.audit.util.VariableContext
-
- EXPECT - Static variable in class org.jwall.web.http.HttpRequest
-
- EXPIRES - Static variable in class org.jwall.web.http.HttpHeader
-
- expireSession(Session) - Method in class org.jwall.web.audit.session.AbstractSessionTracker
-
Remove the session from the hash of active sessions and store it in the
list of timed-out sessions.
- expireSession(Session) - Method in class org.jwall.web.audit.session.CookieSessionTracker
-
Expire the session as normally, but also remove the session-id from
the valid-list.
- ExpressionReader - Class in org.jwall.web.audit.filter
-
- ExpressionReader(String) - Constructor for class org.jwall.web.audit.filter.ExpressionReader
-
- ExpressionReader(String, Collection<String>) - Constructor for class org.jwall.web.audit.filter.ExpressionReader
-
- ExpressionReader(String, Collection<String>, Set<Operator>) - Constructor for class org.jwall.web.audit.filter.ExpressionReader
-
- extract(String, E) - Method in interface org.jwall.audit.FeatureExtractor
-
Extract all values for the specified feature from the given event.
- extract(String, LogMessage) - Method in class org.jwall.log.LogMessageExtractor
-
- extract(String, String) - Static method in class org.jwall.web.audit.io.MessageParser
-
- extract(String, AuditEvent) - Method in class org.jwall.web.audit.rules.PersistentCollectionExtractor
-
- extract(String, AuditEvent) - Method in class org.jwall.web.audit.rules.ValueExtractor
-
- extractFormData(String, String) - Static method in class org.jwall.web.audit.util.ParserUtils
-
This method extracts multipart/form-data from a http-request-body.
- extractKey(AuditEvent) - Method in class org.jwall.web.audit.session.AbstractSessionTracker
-
This method extracts the key-feature from an event which is used to
identify the session that this event is related to.
- extractKey(AuditEvent) - Method in class org.jwall.web.audit.session.CookieSessionTracker
-
This method extracts the session-id that is sent in this event
within the cookie, identified by sessionCookie.
- extractKey(AuditEvent) - Method in class org.jwall.web.audit.session.HeuristicSessionTracker
-
Since this tracker simply relies on the remote address as session key, this
method will just return the event's sender-address.
- extractRemoteReferences(AuditEvent) - Method in class org.jwall.web.audit.util.RFICollector
-
This method extracts all remote-file references from the request associated
with this audit event.
- extractRevision(String) - Static method in class org.jwall.Version
-
This method extracts the revision number from the given string.
- extractScores(AuditEvent) - Static method in class org.jwall.web.audit.rules.PersistentCollectionExtractor
-
This method extracts scores and environment variables from the given
event by effectively simulating the actions fired by this event which are
included in the K section of the event.
- extractScores(AuditEvent, Map<String, String>) - Static method in class org.jwall.web.audit.rules.PersistentCollectionExtractor
-
This method extracts scores and environment variables in the same way as
the method above, but uses the specified map as an initial start to
evaluate initial parameters.
- extractTimestamp(String) - Method in class org.jwall.log.io.GenericLogParser
-
- extractTimestamp(String) - Method in class org.jwall.log.io.GenericLogReader
-
- extractTrailer - Static variable in class org.jwall.web.audit.io.AuditEventParser
-
- extractValues(AuditEvent) - Method in class org.jwall.web.audit.rules.operators.AbstractCondition
-
- extractValues(String, AuditEvent) - Static method in class org.jwall.web.audit.rules.ValueExtractor
-
- extractValues(String, Data) - Static method in class org.jwall.web.audit.rules.ValueExtractor
-
- GE - Static variable in interface org.jwall.web.audit.rules.Condition
-
- GELFSender - Class in org.jwall.web.audit
-
This class implements a simple event processor that sends event-messages in
GELF format for each incoming event.
- GELFSender() - Constructor for class org.jwall.web.audit.GELFSender
-
- GenericLogParser - Class in org.jwall.log.io
-
- GenericLogParser() - Constructor for class org.jwall.log.io.GenericLogParser
-
- GenericLogParser(Parser<Map<String, String>>) - Constructor for class org.jwall.log.io.GenericLogParser
-
- GenericLogReader - Class in org.jwall.log.io
-
- GenericLogReader(GenericLogParser, Reader) - Constructor for class org.jwall.log.io.GenericLogReader
-
- GenericLogReader(GenericLogParser, InputStream) - Constructor for class org.jwall.log.io.GenericLogReader
-
- GenericLogReader(GenericLogParser, InputStream, String, String) - Constructor for class org.jwall.log.io.GenericLogReader
-
- GenericParser - Class in org.jwall.log.io
-
- GenericParser(List<ParserGenerator.Token>) - Constructor for class org.jwall.log.io.GenericParser
-
- GEO - Static variable in class org.jwall.web.audit.ModSecurity
-
- get(String) - Method in interface org.jwall.audit.Event
-
This method returns the specified aspect for the given event.
- get(String) - Method in interface org.jwall.audit.EventView
-
Retrieve the event with the given ID from the view.
- get(String) - Method in interface org.jwall.audit.rules.RuleContext
-
This method allows to retrieve an object from the context by some variable name.
- get(int) - Method in class org.jwall.audit.script.EventList
-
- get(String) - Method in class org.jwall.audit.script.ScriptEvent
-
- get(String) - Method in class org.jwall.audit.script.ScriptEventView
-
- get(int) - Method in class org.jwall.audit.script.utils.AbstractList
-
- get(String) - Method in class org.jwall.audit.script.utils.Counter
-
- get(String) - Method in interface org.jwall.log.LogMessage
-
- get(String) - Method in class org.jwall.log.LogMessageImpl
-
- get(String) - Method in class org.jwall.web.audit.AuditData
-
- get(String) - Method in interface org.jwall.web.audit.AuditEvent
-
Returns the given variable as String or an empty string if
the variable is not set.
- get(String) - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- get(String) - Method in class org.jwall.web.audit.IronBeeEventMessage
-
- get(String) - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- get(String) - Method in class org.jwall.web.audit.util.Cache
-
- get(String, AuditEvent) - Method in class org.jwall.web.audit.util.MacroExpander
-
- getAcceptedIssuers() - Method in class org.jwall.web.audit.net.AuditEventConsoleSender.ZeroTrustManager
-
- getAcceptedIssuers() - Method in class org.jwall.web.audit.net.AuditEventURLConnectionSender.ZeroTrustManager
-
- getActions() - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- getAddress() - Method in class org.jwall.web.audit.GELFSender
-
- getAll(String) - Method in class org.jwall.audit.script.ScriptEvent
-
- getAll(String) - Method in interface org.jwall.web.audit.AuditEvent
-
This method returns the list of a collection which if referenced by the
given variable var.
- getAll(String) - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- getAll(String) - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getAuditEventListeners() - Method in class org.jwall.web.audit.AuditEventDispatcher
-
Returns the collection of currently registered listeners.
- getAuditEventType() - Method in interface org.jwall.web.audit.AuditEvent
-
- getAuditEventType() - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- getAuditEventType() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getAuditHeader() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getAuditLogTrailer() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
Deprecated.
- getBody() - Method in class org.jwall.web.http.HttpMessage
-
- getBodyAsString() - Method in class org.jwall.web.http.HttpMessage
-
- getBooleanOperators() - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- getBuffers(String) - Method in class org.jwall.web.audit.net.SyslogAuditEventMultiStream
-
- getBuild() - Method in class org.jwall.Version
-
- getCacheSize() - Method in class org.jwall.audit.processor.DNSLookup
-
- getChannel() - Method in class org.jwall.web.http.HttpResponse
-
- getCharset() - Method in class org.jwall.web.http.HttpResponse
-
- getChunkSize() - Method in class org.jwall.web.http.HttpChunk
-
- getCollection() - Method in class org.jwall.web.audit.processor.HttpHeaderParser
-
- getColumnNames() - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
- getComment() - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- getCompletions(String) - Method in interface org.jwall.audit.EventView
-
This method returns the list of values observed for the specified
variable.
- getComponentName() - Static method in class org.jwall.web.audit.Version
-
Return the name of the component to which this version
information belongs.
- getConditions() - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- getConnection() - Method in class org.jwall.web.audit.net.AuditEventURLConnectionSender
-
- getContentLength() - Method in class org.jwall.web.http.HttpHeader
-
Returns the value (Integer) of the Content-Length header.
- getContentType() - Method in class org.jwall.web.http.HttpResponse
-
- getCount() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getCount() - Method in class org.jwall.web.audit.util.RFICollector
-
- getCurrentFile() - Method in class org.jwall.web.audit.io.SequentialFileReader
-
- getCurrentOffset() - Method in class org.jwall.web.audit.io.SequentialFileReader
-
- getDataRead() - Method in class org.jwall.web.audit.io.AbstractAuditEventReader
-
Returns the number of bytes that have been read.
- getDate() - Method in interface org.jwall.web.audit.AuditEvent
-
Returns the date of this events birth.
- getDate() - Method in interface org.jwall.web.audit.AuditEventMessage
-
- getDate() - Method in class org.jwall.web.audit.filter.AuditEventDateMatch
-
- getDate() - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- getDate() - Method in class org.jwall.web.audit.IronBeeEventMessage
-
- getDate() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getDate() - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- getDefault(String) - Method in class org.jwall.log.io.GenericLogParser
-
- getDefault(String) - Method in class org.jwall.log.io.GenericLogReader
-
- getDefaults() - Method in class org.jwall.log.io.GenericLogParser
-
- getDefaults() - Method in class org.jwall.log.io.GenericParser
-
- getDefaults() - Method in interface org.jwall.log.io.Parser
-
- getDefaults() - Method in class org.jwall.log.io.TimeParser
-
- getDirectoryFor(Date) - Method in class org.jwall.web.audit.io.ConcurrentAuditWriter
-
This method creates the file-name for the given date and also creates the
file itself and the corresponding subdirectories.
- getElements() - Method in class org.jwall.web.audit.filter.FilterExpressionList
-
- getEvent(Integer) - Method in interface org.jwall.web.audit.AuditEventView
-
This method will return the complete audit-event from the storage.
- getEvent(String) - Method in interface org.jwall.web.audit.AuditEventView
-
This method will return the complete audit-event from the storage.
- getEventAsStream(Integer) - Method in interface org.jwall.web.audit.AuditEventView
-
- getEventCount() - Static method in class org.jwall.web.audit.DefaultAuditEventFactory
-
- getEventEntry(Integer) - Method in interface org.jwall.web.audit.AuditEventView
-
This method will retrieve the entry with the given id from the index or
null if no entry exists with that id.
- getEventId() - Method in interface org.jwall.web.audit.AuditEvent
-
The unique ID, created by modsecurity.
- getEventId() - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- getEventId() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getEventMessages() - Method in interface org.jwall.web.audit.AuditEvent
-
- getEventMessages() - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- getEventMessages() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getEventRaw(Integer) - Method in interface org.jwall.web.audit.AuditEventView
-
- getExpression() - Method in class org.jwall.web.audit.util.ClientIPObfuscation
-
- getFile() - Method in interface org.jwall.web.audit.AuditEventMessage
-
- getFile() - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
- getFile() - Method in class org.jwall.web.audit.IronBeeEventMessage
-
- getFile() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getFile() - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- getFileFor(AuditEvent) - Method in class org.jwall.web.audit.io.ConcurrentAuditWriter
-
- getFileSize() - Method in class org.jwall.web.audit.io.AbstractAuditEventReader
-
Returns the number of bytes that are available in the file.
- getFirst() - Method in class org.jwall.web.audit.filter.FilterExpressionList
-
- getFormat() - Method in class org.jwall.web.audit.util.Timestamp
-
- getFrom() - Method in class org.jwall.web.audit.processor.RemoteAddressResolver
-
- getFrom() - Method in class org.jwall.web.audit.util.Timestamp
-
- getHeader() - Method in class org.jwall.web.http.HttpHeader
-
- getHeader(String) - Method in class org.jwall.web.http.HttpHeader
-
- getHeader() - Method in class org.jwall.web.http.HttpMessage
-
- getHeader(String) - Method in class org.jwall.web.http.HttpMessage
-
- getHeaderNames() - Method in class org.jwall.web.http.HttpHeader
-
- getHeaderNames() - Method in class org.jwall.web.http.HttpMessage
-
- getHits() - Method in class org.jwall.web.audit.util.Cache
-
- getHttpStream() - Method in class org.jwall.web.http.HttpResponse
-
- getId() - Method in class org.jwall.web.audit.session.Session
-
- getId() - Method in interface org.jwall.web.audit.session.SessionContext
-
This method returns an unique identifier that serves as a key to this session.
- getId() - Method in class org.jwall.web.http.nio.HttpResponseChannel
-
- getIndexedVariables() - Method in interface org.jwall.audit.EventView
-
This method returns the set of variables which are indexed by a view.
- getInetAddress() - Method in class org.jwall.web.audit.session.Session
-
- getInputString() - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- getInstance() - Static method in class org.jwall.web.audit.DefaultAuditEventFactory
-
This method will return the shared instance of this factory.
- getInstanceCount() - Static method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getInstanceCount() - Static method in class org.jwall.web.audit.ModSecurityEventMessage
-
- getItem() - Method in class org.jwall.web.audit.io.IronBeeAuditReader.IBEventHandler
-
- getKey() - Method in class org.jwall.audit.processor.DNSLookup
-
- getKey() - Method in class org.jwall.web.audit.GELFSender
-
- getKey() - Method in class org.jwall.web.audit.processor.PersistentCollectionProcessor
-
- getKey() - Method in class org.jwall.web.audit.util.Timestamp
-
- getLabel() - Method in interface org.jwall.web.audit.rules.EventAction
-
- getLastAlertMessages(int) - Method in interface org.jwall.web.audit.AuditEventView
-
- getLine() - Method in interface org.jwall.web.audit.AuditEventMessage
-
- getLine() - Method in class org.jwall.web.audit.IronBeeEventMessage
-
- getLine() - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- getLineNumber() - Method in exception org.jwall.web.audit.SyntaxException
-
- getListeners() - Method in class org.jwall.web.audit.AuditEventProcessorPipeline
-
- getMatch() - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- getMatches() - Method in class org.jwall.web.audit.filter.AuditEventFilter
-
- getMessage() - Method in interface org.jwall.log.LogMessage
-
- getMessage() - Method in class org.jwall.log.LogMessageImpl
-
- getMessage() - Method in exception org.jwall.web.audit.SyntaxException
-
- getMessage() - Method in class org.jwall.web.http.HttpResponse
-
- getMessageHeader() - Method in class org.jwall.web.http.HttpMessage
-
- getMethod() - Method in class org.jwall.web.http.HttpRequest
-
- getMisses() - Method in class org.jwall.web.audit.util.Cache
-
- getName() - Method in class org.jwall.log.io.ParserGenerator.Token
-
- getName() - Method in class org.jwall.web.audit.rules.actions.AbstractEventAction
-
- getName() - Method in interface org.jwall.web.audit.rules.EventAction
-
- getNumberOfEvents() - Method in class org.jwall.web.audit.AuditEventDispatcher
-
Returns the number of events that have been dispatched by this instance.
- getNumberOfRequests() - Method in class org.jwall.web.http.nio.HttpRequestChannel
-
- getNumberOfResponses() - Method in class org.jwall.web.http.nio.HttpResponseChannel
-
- getOffset() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getOldFileHandler() - Method in class org.jwall.web.audit.io.SequentialFileReader
-
- getOp() - Method in class org.jwall.audit.Match
-
- getOperator() - Method in class org.jwall.audit.Match
-
- getOperator() - Method in class org.jwall.web.audit.filter.FilterExpressionList
-
- getOperator() - Method in interface org.jwall.web.audit.rules.Condition
-
This returns a textual representation of the operator of this condition.
- getOperator() - Method in class org.jwall.web.audit.rules.operators.AbstractCondition
-
- getOperator() - Method in class org.jwall.web.audit.rules.operators.BeginsWith
-
- getOperator() - Method in class org.jwall.web.audit.rules.operators.ConditionEQ
-
- getOperator() - Method in class org.jwall.web.audit.rules.operators.ConditionGE
-
- getOperator() - Method in class org.jwall.web.audit.rules.operators.ConditionGT
-
- getOperator() - Method in class org.jwall.web.audit.rules.operators.ConditionIN
-
- getOperator() - Method in class org.jwall.web.audit.rules.operators.ConditionLE
-
- getOperator() - Method in class org.jwall.web.audit.rules.operators.ConditionLT
-
- getOperator() - Method in class org.jwall.web.audit.rules.operators.ConditionPM
-
- getOperator() - Method in class org.jwall.web.audit.rules.operators.ConditionRX
-
- getOperator() - Method in class org.jwall.web.audit.rules.operators.ConditionSX
-
- getOperator() - Method in class org.jwall.web.audit.rules.operators.Contains
-
- getOperator() - Method in class org.jwall.web.audit.rules.operators.EndsWith
-
- getParameters() - Method in interface org.jwall.audit.script.Script
-
This method returns a Map of parameters.
- getParameters() - Method in interface org.jwall.web.audit.rules.EventAction
-
- getPattern() - Method in class org.jwall.log.io.ParserGenerator.Token
-
- getPayload() - Method in class org.jwall.web.http.HttpResponse
-
- getPort() - Method in class org.jwall.web.audit.GELFSender
-
- getPosition() - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- getPrefix() - Method in class org.jwall.web.audit.GELFSender
-
- getPriority(EventProcessor<E>) - Method in interface org.jwall.audit.EventProcessorPipeline
-
- getPriority() - Method in class org.jwall.audit.processor.AbstractEventProcessor
-
- getPriority(EventProcessor<LogMessage>) - Method in class org.jwall.log.LogMessageProcessorPipeline
-
- getPriority(EventProcessor<AuditEvent>) - Method in class org.jwall.web.audit.AuditEventProcessorPipeline
-
- getProcessors() - Method in class org.jwall.web.audit.AuditEventProcessorPipeline
-
- getProperty(String) - Static method in class org.jwall.Collector
-
- getPureValue() - Method in class org.jwall.web.audit.rules.operators.AbstractCondition
-
- getRawData() - Method in interface org.jwall.web.audit.AuditEvent
-
Deprecated.
- getRawData() - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- getRawData() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getReleased() - Method in class org.jwall.Version
-
- getReplacement() - Method in class org.jwall.web.audit.util.ClientIPObfuscation
-
- getRequestBody() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getRequestHeader() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getRequestURL() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getResponseHeader() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
Deprecated.
- getResults() - Method in interface org.jwall.audit.script.Script
-
This returns the result of the script (if any).
- getResults() - Method in class org.jwall.audit.script.ScriptRunner
-
- getResultUrl() - Method in interface org.jwall.audit.script.Script
-
This method returns the ResultUrl of that script.
- getRevision() - Method in class org.jwall.Version
-
- getRoles(String) - Method in interface org.jwall.web.audit.util.Authenticator
-
This method returns the list of groups which the user sepcified by login
belongs to.
- getRoles(String) - Method in class org.jwall.web.audit.util.SimplePasswordAuthenticator
-
- getRuleData() - Method in interface org.jwall.web.audit.AuditEventMessage
-
- getRuleData() - Method in class org.jwall.web.audit.IronBeeEventMessage
-
- getRuleData() - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- getRuleId() - Method in interface org.jwall.web.audit.AuditEventMessage
-
- getRuleId() - Method in class org.jwall.web.audit.IronBeeEventMessage
-
- getRuleId() - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- getRuleMsg() - Method in interface org.jwall.web.audit.AuditEventMessage
-
- getRuleMsg() - Method in class org.jwall.web.audit.IronBeeEventMessage
-
- getRuleMsg() - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- getRules() - Method in class org.jwall.audit.rules.EventRuleEngine
-
- getRuleTags() - Method in interface org.jwall.web.audit.AuditEventMessage
-
- getRuleTags() - Method in class org.jwall.web.audit.IronBeeEventMessage
-
- getRuleTags() - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- getScore() - Method in class org.jwall.web.audit.session.Session
-
- getScriptLanguage() - Method in interface org.jwall.audit.script.Script
-
This method determines the language which is used to
interpret/run the script source code.
- getScriptSource() - Method in interface org.jwall.audit.script.Script
-
This method provides the source code of the script.
- getSection(int) - Method in interface org.jwall.web.audit.AuditEvent
-
Returns the string, which contains the whole section of this audit-event.
- getSection(int) - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- getSection(int) - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getSectionIndex(String) - Static method in class org.jwall.web.audit.io.AbstractAuditEventReader
-
This method returns the index of the section, that the given line maps to.
- getSectionName() - Method in class org.jwall.web.audit.io.IronBeeHttpHeaderParser
-
- getSectionName() - Method in class org.jwall.web.audit.io.IronBeeSectionParser
-
- getSections() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getSections() - Method in class org.jwall.web.audit.util.ClientIPObfuscation
-
- getSections() - Method in interface org.jwall.web.audit.util.Obfuscator
-
- getSeparator() - Method in class org.jwall.web.audit.processor.RuleTagProcessor
-
- getSession(String) - Method in class org.jwall.web.audit.session.AbstractSessionTracker
-
This method returns the session with the given session-id.
- getSession(String) - Method in interface org.jwall.web.audit.session.SessionTracker
-
This method is meant to return the session that is associated with the given ID.
- getSessionId() - Method in interface org.jwall.web.audit.AuditEvent
-
Deprecated.
Use get( "SESSION_ID" ); instead.
- getSessionId() - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- getSessionId() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getSessions() - Method in class org.jwall.web.audit.session.AbstractSessionTracker
-
This method returns all the sessions (active and timed-out) that have
been created by the session-tracker.
- getSessions() - Method in interface org.jwall.web.audit.session.SessionTracker
-
Returns a list (collection) of the sessions that have been created/observed by this
tracker.
- getSessionTimeOut() - Method in class org.jwall.web.audit.session.AbstractSessionTracker
-
Returns the session-timeout that is used by this tracker.
- getSessionTimeOut() - Method in interface org.jwall.web.audit.session.SessionTracker
-
This method simply returns the session timeout of the tracker implementation.
- getSeverity() - Method in interface org.jwall.web.audit.AuditEventMessage
-
- getSeverity() - Method in class org.jwall.web.audit.IronBeeEventMessage
-
- getSeverity(String) - Static method in class org.jwall.web.audit.ModSecurity
-
- getSeverity(int) - Static method in class org.jwall.web.audit.ModSecurity
-
- getSeverity() - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- getSize() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getSocketAuthenticator() - Method in class org.jwall.web.audit.net.SyslogReceiverThread
-
- getSocketConnection() - Method in class org.jwall.web.audit.net.AuditEventConsoleSender
-
- getSource() - Method in interface org.jwall.log.LogMessage
-
- getSource() - Method in class org.jwall.log.LogMessageImpl
-
- getSource() - Method in class org.jwall.web.audit.io.DefaultLineReader
-
- getSource() - Method in interface org.jwall.web.audit.io.LineReader
-
- getSource() - Method in class org.jwall.web.audit.io.SequentialFileReader
-
- getState() - Method in class org.jwall.web.http.nio.HttpMessageChannel
-
This method returns the int-code of the channel's
current state.
- getStatistics() - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
Returns the number of events written since the last
call of this method.
- getStatus() - Method in class org.jwall.web.http.HttpResponse
-
- getSupportedOperators() - Method in interface org.jwall.audit.EventView
-
- getSupportedOperators() - Method in class org.jwall.web.audit.filter.AuditEventDateMatch
-
- getTag() - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- getTags() - Method in interface org.jwall.web.audit.AuditEventView
-
Deprecated.
- getTags() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getTagsByEventId(Integer) - Method in interface org.jwall.web.audit.AuditEventView
-
Deprecated.
- getTagsByUser(String) - Method in interface org.jwall.web.audit.AuditEventView
-
Deprecated.
- getTarget() - Method in class org.jwall.audit.processor.DNSLookup
-
- getText() - Method in interface org.jwall.web.audit.AuditEventMessage
-
- getText() - Method in class org.jwall.web.audit.IronBeeEventMessage
-
- getText() - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- getTimeout() - Method in class org.jwall.web.http.nio.HttpMessageChannel
-
This method returns the current timeout (in milliseconds) of the
channel.
- getTimestamp() - Method in interface org.jwall.audit.Event
-
Returns the time of this event in milliseconds since 1970.
- getTimestamp() - Method in class org.jwall.audit.script.ScriptEvent
-
- getTimestamp() - Method in class org.jwall.log.LogMessageImpl
-
- getTimestamp() - Method in class org.jwall.web.audit.AuditData
-
- getTimestamp() - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- getTimestamp() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getTotal() - Method in class org.jwall.audit.script.utils.Counter
-
- getTxId() - Method in interface org.jwall.web.audit.AuditEventMessage
-
- getTxId() - Method in class org.jwall.web.audit.IronBeeEventMessage
-
- getTxId() - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- getType() - Method in interface org.jwall.audit.Event
-
- getType() - Method in class org.jwall.audit.script.ScriptEvent
-
- getType() - Method in class org.jwall.log.LogMessageImpl
-
- getType() - Method in class org.jwall.web.audit.AuditData
-
- getType() - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- getType() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getType() - Method in class org.jwall.web.audit.session.Session
-
Returns wether this session context is tracked based on a Session-Id in
Cookies, Parameters or just heuristically using ip, time and user-agent.
- getURI() - Method in class org.jwall.web.http.HttpRequest
-
- getURL() - Method in class org.jwall.web.http.HttpRequest
-
- getUse() - Method in class org.jwall.web.audit.util.Cache
-
- getUser() - Method in class org.jwall.web.audit.processor.RuleTagProcessor
-
- getValue() - Method in class org.jwall.audit.Match
-
- getValue() - Method in class org.jwall.audit.processor.DefaultRequestHost
-
A simple getter for the default host value.
- getValue() - Method in class org.jwall.log.io.ParserGenerator.Token
-
- getValue() - Method in interface org.jwall.web.audit.rules.Condition
-
This method returns the value used by this condition to match
the value of the variable against.
- getValue() - Method in class org.jwall.web.audit.rules.operators.AbstractCondition
-
- getValueObject() - Method in class org.jwall.audit.Match
-
- getValueObject() - Method in class org.jwall.web.audit.filter.AuditEventDateMatch
-
- getValues() - Method in class org.jwall.web.audit.rules.actions.AbstractEventAction
-
- getValues() - Method in interface org.jwall.web.audit.rules.EventAction
-
- getVariable() - Method in class org.jwall.audit.Match
-
- getVariable() - Method in class org.jwall.web.audit.filter.AuditEventDateMatch
-
- getVariable() - Method in interface org.jwall.web.audit.rules.Condition
-
Returns the variable on which this condition acts.
- getVariable() - Method in class org.jwall.web.audit.rules.operators.AbstractCondition
-
- getVariable(String) - Method in class org.jwall.web.audit.session.Session
-
- getVariable(String) - Method in interface org.jwall.web.audit.session.SessionContext
-
This method returns the string-value of the variable given by name.
- getVariable() - Method in class org.jwall.web.audit.util.ClientIPObfuscation
-
- getVariableNames() - Method in class org.jwall.web.audit.session.Session
-
- getVariableNames() - Method in interface org.jwall.web.audit.session.SessionContext
-
This method returns a set of variable names (strings) that are set within the session scope
and did not expire yet.
- getVariables() - Method in interface org.jwall.audit.EventView
-
This method returns the variable names which are supported for filtering
by this view.
- getVariables(E) - Method in interface org.jwall.audit.FeatureExtractor
-
This method extracts all available feature names for the given event.
- getVariables(LogMessage) - Method in class org.jwall.log.LogMessageExtractor
-
- getVariables() - Method in interface org.jwall.web.audit.AuditEvent
-
This method returns the list of all variables available in this event.
- getVariables() - Method in interface org.jwall.web.audit.AuditEventView
-
- getVariables() - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- getVariables() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- getVariables(AuditEvent) - Method in class org.jwall.web.audit.rules.PersistentCollectionExtractor
-
- getVariables(AuditEvent) - Method in class org.jwall.web.audit.rules.ValueExtractor
-
- getVersion() - Method in class org.jwall.Version
-
- getVersion(String, String) - Static method in class org.jwall.Version
-
- getVersion() - Static method in class org.jwall.web.audit.Version
-
Return the version number as string.
- getVersion() - Method in class org.jwall.web.http.HttpMessage
-
- getXStream(ClassLoader) - Static method in class org.jwall.web.audit.filter.AuditEventFilter
-
- getXStream() - Static method in class org.jwall.web.audit.filter.AuditEventFilter
-
- groups - Variable in class org.jwall.web.audit.util.SimplePasswordAuthenticator
-
- GT - Static variable in interface org.jwall.web.audit.rules.Condition
-
- guessFormat(File) - Static method in class org.jwall.web.audit.io.AuditFormat
-
- guessFormat(InputStream) - Static method in class org.jwall.web.audit.io.AuditFormat
-
Return the most probable audit-format for the given input-string.
- guessUnit(String) - Method in class org.jwall.log.io.TimeParser
-
- gunzip(byte[]) - Static method in class org.jwall.web.http.nio.CompressionHandler
-
- gzip(byte[]) - Static method in class org.jwall.web.http.nio.CompressionHandler
-
- handle(File) - Method in interface org.jwall.web.audit.io.FileHandler
-
- handleEvent(AuditEvent) - Method in class org.jwall.web.audit.util.RFICollector
-
This is called for all events.
- handlerFinished(AuditEventStreamHandler) - Method in class org.jwall.audit.server.SyslogReceiver
-
- handlerFinished(AuditEventStreamHandler) - Method in class org.jwall.web.audit.net.SyslogReceiverThread
-
- hasBody() - Method in class org.jwall.web.http.HttpMessage
-
- hasBooleanOperator() - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- hasEventsPending() - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
- hasEventsPending() - Method in class org.jwall.web.audit.io.BufferedAuditEventWriter
-
This method can be used to check if any events are pending to be
written to disk by the underlying writer.
- hashCode() - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- hashCode() - Method in class org.jwall.web.audit.session.Session
-
- hasMatchOn(String) - Method in class org.jwall.web.audit.filter.AuditEventFilter
-
- hasMoreTokens() - Method in class org.jwall.log.io.AccessLogParser.Tokenizer
-
- hasNext() - Method in class org.jwall.audit.script.utils.ListIteratorImpl
-
- hasNext() - Method in class org.jwall.log.io.SequentialFileInputStream
-
This method checks if there exists a next file in the sequence.
- hasNext() - Method in class org.jwall.web.audit.AuditEventQueue
-
This method returns true, iff the queue is
non-empty.
- hasNext() - Method in class org.jwall.web.audit.io.AbstractAuditEventReader
-
Deprecated.
- hasNext() - Method in class org.jwall.web.audit.io.AuditEventIterator
-
- hasNext() - Method in interface org.jwall.web.audit.io.AuditEventSource
-
This method returns true if there is at least one more event pending, so
if hasNext returns true, the next call to nextEvent
should neither fail nor throw an exception.
- hasNext() - Method in class org.jwall.web.audit.io.BufferedAuditEventSource
-
- hasNext() - Method in class org.jwall.web.audit.io.SequentialFileReader
-
- hasNext() - Method in class org.jwall.web.audit.net.NetworkAuditEventSource
-
- hasPrevious() - Method in class org.jwall.audit.script.utils.ListIteratorImpl
-
- header - Variable in class org.jwall.web.http.HttpMessage
-
- HEADER_FIELD_SEPARATOR - Static variable in class org.jwall.web.http.HttpHeader
-
- HEURISTIC_BASED - Static variable in class org.jwall.web.audit.session.Session
-
- HeuristicSessionTracker - Class in org.jwall.web.audit.session
-
This heuristic session-tracker implements the session-algorithm used by
most popular web-statistic tools, e.g.
- HeuristicSessionTracker(long) - Constructor for class org.jwall.web.audit.session.HeuristicSessionTracker
-
This constructor creates a session-tracker based on heuristics.
- HIGHEST_SEVERITY - Static variable in class org.jwall.web.audit.ModSecurity
-
- HOST - Static variable in class org.jwall.web.http.HttpRequest
-
- HOUR - Static variable in class org.jwall.log.io.TimeParser
-
- HOUR_MS - Static variable in class org.jwall.web.audit.util.TimeFormat
-
- HttpChunk - Class in org.jwall.web.http
-
- HttpChunk(String, ByteBuffer) - Constructor for class org.jwall.web.http.HttpChunk
-
- HttpHeader - Class in org.jwall.web.http
-
- HttpHeader(String) - Constructor for class org.jwall.web.http.HttpHeader
-
- HttpHeaderParser - Class in org.jwall.web.audit.processor
-
- HttpHeaderParser() - Constructor for class org.jwall.web.audit.processor.HttpHeaderParser
-
- HttpHeaderParser(String, String, String) - Constructor for class org.jwall.web.audit.processor.HttpHeaderParser
-
- HttpMessage - Class in org.jwall.web.http
-
This class implements an abstract HttpMessage.
- HttpMessage(HttpHeader, byte[]) - Constructor for class org.jwall.web.http.HttpMessage
-
- HttpMessageChannel<T extends HttpMessage> - Class in org.jwall.web.http.nio
-
- HttpMessageChannel(ReadableByteChannel) - Constructor for class org.jwall.web.http.nio.HttpMessageChannel
-
This constructor creates a new instance of the message channel class.
- HttpProtocol - Interface in org.jwall.web.audit.session
-
This interface defines the constants that are part of the HTTP protocol.
- HttpRequest - Class in org.jwall.web.http
-
- HttpRequest(String, byte[]) - Constructor for class org.jwall.web.http.HttpRequest
-
This will create a new http-request from the given String-array.
- HttpRequest(HttpHeader, byte[]) - Constructor for class org.jwall.web.http.HttpRequest
-
- HttpRequest(String) - Constructor for class org.jwall.web.http.HttpRequest
-
- HttpRequestChannel - Class in org.jwall.web.http.nio
-
$Id: HttpRequestStream.java 79 2007-10-22 23:43:37Z chris $
This class implements a reader which reads from the input-stream
and parses http-requests.
- HttpRequestChannel(ReadableByteChannel) - Constructor for class org.jwall.web.http.nio.HttpRequestChannel
-
Creates a HttpRequestStream which parses requests from the given input-stream.
- HttpRequestChannel(InputStream) - Constructor for class org.jwall.web.http.nio.HttpRequestChannel
-
- HttpResponse - Class in org.jwall.web.http
-
This class represents an abstract http message.
- HttpResponse(HttpHeader, byte[]) - Constructor for class org.jwall.web.http.HttpResponse
-
- HttpResponse(String, byte[]) - Constructor for class org.jwall.web.http.HttpResponse
-
- HttpResponse(String, byte[], HttpResponseChannel) - Constructor for class org.jwall.web.http.HttpResponse
-
- HttpResponseChannel - Class in org.jwall.web.http.nio
-
This class reads from an incoming stream and buffers it, parsing the
stream to read the responses.
- HttpResponseChannel(ReadableByteChannel) - Constructor for class org.jwall.web.http.nio.HttpResponseChannel
-
Create a stream of http-response-packets by reading from the
given input-stream.
- MacroExpander - Class in org.jwall.web.audit.util
-
This class performs a simple macro-expansion based on a pattern string and
a ModSecurity audit-log event.
- MacroExpander() - Constructor for class org.jwall.web.audit.util.MacroExpander
-
- MacroExpander(Map<String, String>) - Constructor for class org.jwall.web.audit.util.MacroExpander
-
- MacroExpander(Properties) - Constructor for class org.jwall.web.audit.util.MacroExpander
-
- main(String[]) - Static method in class org.jwall.audit.server.LogService
-
- main(String[]) - Static method in class org.jwall.audit.server.SyslogReceiver
-
- main(String[]) - Static method in class org.jwall.AuditServer
-
- main(String[]) - Static method in class org.jwall.Collector
-
This is the entrypoint for the Collector-tool.
- main(String[]) - Static method in class org.jwall.log.io.AccessLogParser
-
- main(String[]) - Static method in class org.jwall.log.io.ErrorLogParser
-
- main(String[]) - Static method in class org.jwall.log.io.MParser
-
- main(String[]) - Static method in class org.jwall.log.io.SequentialFileInputStream
-
- main(String[]) - Static method in class org.jwall.Version
-
- main(String[]) - Static method in class org.jwall.web.audit.GELFSender
-
- main(String[]) - Static method in class org.jwall.web.audit.net.AuditEventMLogcReceiver
-
- main(String[]) - Static method in class org.jwall.web.audit.net.AuditEventReceiver
-
- main(String[]) - Static method in class org.jwall.web.audit.util.RFICollector
-
- main(String[]) - Static method in class org.jwall.web.audit.util.RFICollectorServer
-
- main(String[]) - Static method in class org.jwall.web.audit.util.RFIController
-
- main(String[]) - Static method in class org.jwall.web.audit.Version
-
- main(String[]) - Static method in class org.jwall.web.http.nio.CompressionHandler
-
- map(AuditEventFilter) - Static method in class org.jwall.web.audit.filter.FilterCompiler
-
- map(FilterExpression) - Static method in class org.jwall.web.audit.filter.FilterCompiler
-
- map(String) - Method in class org.jwall.web.audit.VariableMapping
-
- mapToIronBee(String) - Static method in class org.jwall.web.audit.IronBeeVariables
-
- mapVariable(String) - Static method in class org.jwall.web.audit.IronBeeAuditEvent
-
- markSupported() - Method in class org.jwall.log.io.SequentialFileInputStream
-
- Match - Class in org.jwall.audit
-
This class implements the most generic ModSecurity-like match.
- Match() - Constructor for class org.jwall.audit.Match
-
- Match(String) - Constructor for class org.jwall.audit.Match
-
- Match(String, String) - Constructor for class org.jwall.audit.Match
-
- Match(String, Operator, String) - Constructor for class org.jwall.audit.Match
-
- MATCH_ALL_FILTERS - Static variable in class org.jwall.web.audit.rules.AuditEventRule
-
- MATCH_ANY_FILTER - Static variable in class org.jwall.web.audit.rules.AuditEventRule
-
- matches(E) - Method in interface org.jwall.audit.Filter
-
- matches(E, RuleContext) - Method in interface org.jwall.audit.rules.EventRule
-
- matches(LogMessage) - Method in class org.jwall.log.LogMessageMatch
-
- matches(AuditEvent) - Method in class org.jwall.web.audit.filter.AuditEventDateMatch
-
- matches(AuditEvent) - Method in class org.jwall.web.audit.filter.AuditEventFilter
-
- matches(AuditEvent) - Method in class org.jwall.web.audit.filter.AuditEventMatch
-
- matches(AuditEvent) - Method in interface org.jwall.web.audit.filter.FilterExpression
-
Matches the expression against the given event.
- matches(AuditEvent) - Method in class org.jwall.web.audit.filter.FilterExpressionList
-
- matches(AuditEvent, RuleContext) - Method in class org.jwall.web.audit.rules.AuditEventRule
-
This method checks whether the rule triggers for the given event.
- matches(AuditEvent) - Method in interface org.jwall.web.audit.rules.Condition
-
This method executes the condition against the given event.
- matches(String, String) - Method in interface org.jwall.web.audit.rules.Condition
-
- matches(AuditEvent) - Method in class org.jwall.web.audit.rules.operators.AbstractCondition
-
Deprecated.
- matches(List<String>) - Method in class org.jwall.web.audit.rules.operators.AbstractCondition
-
- matches(String) - Method in class org.jwall.web.audit.rules.operators.AbstractCondition
-
- matches(String, String) - Method in class org.jwall.web.audit.rules.operators.BeginsWith
-
- matches(String, String) - Method in class org.jwall.web.audit.rules.operators.ConditionEQ
-
- matches(String, String) - Method in class org.jwall.web.audit.rules.operators.ConditionGE
-
- matches(String, String) - Method in class org.jwall.web.audit.rules.operators.ConditionGT
-
- matches(String, String) - Method in class org.jwall.web.audit.rules.operators.ConditionIN
-
- matches(String, String) - Method in class org.jwall.web.audit.rules.operators.ConditionLE
-
- matches(String, String) - Method in class org.jwall.web.audit.rules.operators.ConditionLT
-
- matches(String, String) - Method in class org.jwall.web.audit.rules.operators.ConditionPM
-
- matches(String, String) - Method in class org.jwall.web.audit.rules.operators.ConditionRX
-
- matches(String, String) - Method in class org.jwall.web.audit.rules.operators.ConditionSX
-
- matches(String, String) - Method in class org.jwall.web.audit.rules.operators.Contains
-
- matches(String, String) - Method in class org.jwall.web.audit.rules.operators.EndsWith
-
- matches(String) - Method in class org.jwall.web.audit.util.WildcardPattern
-
- matches(String, String) - Static method in class org.jwall.web.audit.util.WildcardPattern
-
- matchesAll(List<String>) - Method in class org.jwall.web.audit.rules.operators.AbstractCondition
-
- matchesAny(List<String>) - Method in class org.jwall.web.audit.rules.operators.AbstractCondition
-
- matchesSequence(File) - Method in class org.jwall.log.io.SequentialFileInputStream
-
- matchesSequence(File) - Method in class org.jwall.web.audit.io.SequentialFileReader
-
- MAX_FORWARDS - Static variable in class org.jwall.web.http.HttpRequest
-
- MAX_LOGIN_FAILURES - Static variable in class org.jwall.web.audit.net.NetworkClientWorkerThread
-
- MAX_READAHEAD_BUFFER - Static variable in class org.jwall.web.http.nio.CompressionHandler
-
- maximumSize() - Method in class org.jwall.web.audit.util.Cache
-
- md - Variable in class org.jwall.web.audit.util.SimplePasswordAuthenticator
-
- MD5 - Class in org.jwall.web.audit.util
-
This is a small helper-class that wraps around the java md5 message-digest
and computes the md5 hex-string of a given input string.
- MD5() - Constructor for class org.jwall.web.audit.util.MD5
-
- md5(String) - Static method in class org.jwall.web.audit.util.MD5
-
This method will simply return the computed MD5 sum of the given input
string.
- md5(byte[]) - Static method in class org.jwall.web.audit.util.MD5
-
This method will simply return the computed MD5 sum of the given input
data.
- md5(Serializable) - Static method in class org.jwall.web.audit.util.MD5
-
- md5(String) - Method in class org.jwall.web.audit.util.RFICollector
-
- MESSAGE - Static variable in interface org.jwall.log.LogMessage
-
- MESSAGE - Static variable in interface org.jwall.web.audit.AuditEvent
-
- messageArrived(LogMessage) - Method in interface org.jwall.log.io.LogMessageListener
-
This method is called whenever a new log message arrived at the
instance where this listener is registered.
- MessageFormatException - Exception in org.jwall.web.http
-
- MessageFormatException(String) - Constructor for exception org.jwall.web.http.MessageFormatException
-
- MessageParser - Class in org.jwall.web.audit.io
-
This class implements a simple message parser, which reads the audit trailer
section from a ModSecurity event and creates Message instances
from that section.
- MessageParser() - Constructor for class org.jwall.web.audit.io.MessageParser
-
- MIN_MS - Static variable in class org.jwall.web.audit.util.TimeFormat
-
- MINUTE - Static variable in class org.jwall.log.io.TimeParser
-
- MOD_SECURITY_1_X_SERIAL_LOG - Static variable in class org.jwall.web.audit.io.AuditFormat
-
- MOD_SECURITY_2_X_CONCURRENT_LOG - Static variable in class org.jwall.web.audit.io.AuditFormat
-
- MOD_SECURITY_2_X_SERIAL_LOG - Static variable in class org.jwall.web.audit.io.AuditFormat
-
- ModSecurity - Class in org.jwall.web.audit
-
This class defines the constants which are used in the whole web-audit
library.
- ModSecurity() - Constructor for class org.jwall.web.audit.ModSecurity
-
- ModSecurity2AuditReader - Class in org.jwall.web.audit.io
-
This class implements a parser for audit-logfile for the modsecurity2.
- ModSecurity2AuditReader(InputStream) - Constructor for class org.jwall.web.audit.io.ModSecurity2AuditReader
-
This constructor creates an audit-event-Reader that reads from the
given input stream.
- ModSecurity2AuditReader(InputStream, boolean) - Constructor for class org.jwall.web.audit.io.ModSecurity2AuditReader
-
This constructor creates an audit-event-Reader that reads from the
given input stream.
- ModSecurity2AuditReader(File, boolean) - Constructor for class org.jwall.web.audit.io.ModSecurity2AuditReader
-
This constructor creates a ModSecurity2-AuditReader with a file
as source.
- ModSecurity2AuditReader(File) - Constructor for class org.jwall.web.audit.io.ModSecurity2AuditReader
-
This simple constructor creates a reader which will simply read
events from the given file without listening for newly appended
events.
- ModSecurity2AuditReader(Reader) - Constructor for class org.jwall.web.audit.io.ModSecurity2AuditReader
-
- ModSecurity2AuditStream - Class in org.jwall.audit.server
-
This class implements a parser for audit-logfile for the modsecurity2.
- ModSecurity2AuditStream(InputStream, AuditEventListener) - Constructor for class org.jwall.audit.server.ModSecurity2AuditStream
-
This constructor creates an audit-event-Reader that reads from the
given input stream.
- ModSecurity2AuditStream(InputStream, AuditEventListener, boolean) - Constructor for class org.jwall.audit.server.ModSecurity2AuditStream
-
This constructor creates an audit-event-Reader that reads from the
given input stream.
- ModSecurity2AuditStream - Class in org.jwall.web.audit.io
-
This class implements a parser for audit-logfile for the modsecurity2.
- ModSecurity2AuditStream(InputStream, AuditEventListener) - Constructor for class org.jwall.web.audit.io.ModSecurity2AuditStream
-
This constructor creates an audit-event-Reader that reads from the
given input stream.
- ModSecurity2AuditStream(InputStream, AuditEventListener, boolean) - Constructor for class org.jwall.web.audit.io.ModSecurity2AuditStream
-
This constructor creates an audit-event-Reader that reads from the
given input stream.
- ModSecurity2AuditWriter - Class in org.jwall.web.audit.io
-
This simple writer creates an audit-log file in the format of the ModSecurity2 audit-log.
- ModSecurity2AuditWriter(File) - Constructor for class org.jwall.web.audit.io.ModSecurity2AuditWriter
-
- ModSecurityAuditEvent - Class in org.jwall.web.audit
-
- ModSecurityAuditEvent(AuditEventType) - Constructor for class org.jwall.web.audit.ModSecurityAuditEvent
-
- ModSecurityAuditEvent(ModSecurityAuditEvent) - Constructor for class org.jwall.web.audit.ModSecurityAuditEvent
-
This clone-constructor creates a copy of the given audit-event.
- ModSecurityAuditEvent(String[], AuditEventType) - Constructor for class org.jwall.web.audit.ModSecurityAuditEvent
-
This creates an instance of this class by parsing all fields from the
given string-array.
- ModSecurityAuditEvent(String, String[], File, long, long, AuditEventType) - Constructor for class org.jwall.web.audit.ModSecurityAuditEvent
-
- ModSecurityAuditEvent(String, String[], AuditEventType) - Constructor for class org.jwall.web.audit.ModSecurityAuditEvent
-
This constructor is used, when reading audit-events from a file.
- ModSecurityAuditReader - Class in org.jwall.web.audit.io
-
This class implements a reader for AuditEvent-objects read from a file produced
by mod_security prior version 2.0.
- ModSecurityAuditReader(File) - Constructor for class org.jwall.web.audit.io.ModSecurityAuditReader
-
This creates a new instance of this class that reads events from the
given file.
- ModSecurityAuditReader(InputStream) - Constructor for class org.jwall.web.audit.io.ModSecurityAuditReader
-
- ModSecurityAuditReader(File, boolean) - Constructor for class org.jwall.web.audit.io.ModSecurityAuditReader
-
This creates a new instance of this class that reads events from the
given file.
- ModSecurityAuditStream - Class in org.jwall.web.audit.io
-
This class implements a data stream in the context of the streams library.
- ModSecurityAuditStream(URL) - Constructor for class org.jwall.web.audit.io.ModSecurityAuditStream
-
- ModSecurityAuditStream(SourceURL) - Constructor for class org.jwall.web.audit.io.ModSecurityAuditStream
-
- ModSecurityAuditStream(InputStream) - Constructor for class org.jwall.web.audit.io.ModSecurityAuditStream
-
- ModSecurityEventMessage - Class in org.jwall.web.audit
-
- ModSecurityEventMessage() - Constructor for class org.jwall.web.audit.ModSecurityEventMessage
-
- MONTH - Static variable in class org.jwall.log.io.TimeParser
-
- MParser - Class in org.jwall.log.io
-
- MParser() - Constructor for class org.jwall.log.io.MParser
-
- MParser.Pair<K,V> - Class in org.jwall.log.io
-
- MParser.Pair(K, V) - Constructor for class org.jwall.log.io.MParser.Pair
-
- obfuscate(AuditEvent) - Method in class org.jwall.web.audit.AuditEventObfuscatorChain
-
- obfuscate(Integer, String) - Method in class org.jwall.web.audit.util.ClientIPObfuscation
-
- obfuscate(Integer, String) - Method in interface org.jwall.web.audit.util.Obfuscator
-
This method does the obfuscation on the given section data.
- obfuscatesSection(Obfuscator, Integer) - Method in class org.jwall.web.audit.AuditEventObfuscatorChain
-
Checks whether the given obfuscator needs to process the section with the
specified ID.
- Obfuscator - Interface in org.jwall.web.audit.util
-
This is the interface of all obfuscator implementations.
- obfuscators - Variable in class org.jwall.web.audit.AuditEventObfuscatorChain
-
The list of obfuscators which shall be executed on the event
- op - Variable in class org.jwall.audit.Match
-
- openNextFile() - Method in class org.jwall.log.io.SequentialFileInputStream
-
This method closes the current file an opens the next file in the sequence.
- openNextFile() - Method in class org.jwall.web.audit.io.SequentialFileReader
-
- operator - Variable in class org.jwall.audit.Match
-
- Operator - Enum in org.jwall.web.audit.filter
-
An enumeration of available operators.
- org.jwall - package org.jwall
-
- org.jwall.audit - package org.jwall.audit
-
- org.jwall.audit.processor - package org.jwall.audit.processor
-
- org.jwall.audit.rules - package org.jwall.audit.rules
-
- org.jwall.audit.script - package org.jwall.audit.script
-
- org.jwall.audit.script.utils - package org.jwall.audit.script.utils
-
- org.jwall.audit.server - package org.jwall.audit.server
-
- org.jwall.log - package org.jwall.log
-
- org.jwall.log.io - package org.jwall.log.io
-
- org.jwall.web.audit - package org.jwall.web.audit
-
This package encapsulates the AuditEvent-framework that is used to represent,
create, manage and handle audit events within a Java environment.
- org.jwall.web.audit.filter - package org.jwall.web.audit.filter
-
The filter package provides two simple classes/interfaces to construct filters: the
AuditEventMatch interface and the AuditEventFilter class.
- org.jwall.web.audit.io - package org.jwall.web.audit.io
-
This package contains the interfaces and classes that are used to read
event from various sources or write audit-event to files.
- org.jwall.web.audit.net - package org.jwall.web.audit.net
-
The net-package provides network communication like sending
or receiving of audit data over tcp-connections.
- org.jwall.web.audit.processor - package org.jwall.web.audit.processor
-
- org.jwall.web.audit.rules - package org.jwall.web.audit.rules
-
- org.jwall.web.audit.rules.actions - package org.jwall.web.audit.rules.actions
-
- org.jwall.web.audit.rules.operators - package org.jwall.web.audit.rules.operators
-
- org.jwall.web.audit.session - package org.jwall.web.audit.session
-
The session-package provides some interfaces to implement
session trackers.
- org.jwall.web.audit.test - package org.jwall.web.audit.test
-
- org.jwall.web.audit.util - package org.jwall.web.audit.util
-
This package simply contains some utility classes that are used for parsing and
convenience.
- org.jwall.web.http - package org.jwall.web.http
-
- org.jwall.web.http.nio - package org.jwall.web.http.nio
-
- p - Static variable in class org.jwall.Collector
-
- PARAMETER_BASED - Static variable in class org.jwall.web.audit.session.Session
-
- parse(String) - Method in class org.jwall.log.io.AccessLogParser
-
- parse(String) - Method in class org.jwall.log.io.ErrorLogParser
-
- parse(String) - Method in class org.jwall.log.io.GenericLogParser
-
- parse(String) - Method in class org.jwall.log.io.GenericParser
-
- parse(String) - Method in interface org.jwall.log.io.Parser
-
- parse(String) - Method in class org.jwall.log.io.ParserGenerator
-
- parse(String) - Method in class org.jwall.log.io.TimeParser
-
- parse(String) - Static method in class org.jwall.web.audit.filter.ExpressionReader
-
- parse(String) - Static method in class org.jwall.web.audit.filter.FilterCompiler
-
- parse(String, Collection<String>) - Static method in class org.jwall.web.audit.filter.FilterCompiler
-
- parse(String, Collection<String>, Set<Operator>) - Static method in class org.jwall.web.audit.filter.FilterCompiler
-
- parse(String, Collection<String>, Set<Operator>, Set<BooleanOperator>) - Static method in class org.jwall.web.audit.filter.FilterCompiler
-
- parse(String) - Static method in class org.jwall.web.audit.test.TestParser
-
- parseAuditLogHeader(Map<String, List<String>>, String) - Static method in class org.jwall.web.audit.io.AuditEventParser
-
- parseAuditTrailer(Map<String, List<String>>, String) - Static method in class org.jwall.web.audit.DefaultAuditEventFactory
-
- parseAuditTrailer(Map<String, List<String>>, String) - Static method in class org.jwall.web.audit.io.AuditEventParser
-
- parseDate(String) - Static method in class org.jwall.web.audit.io.AuditEventParser
-
Parse date from AuditTrailer-Section
- ParseException - Exception in org.jwall.web.audit.io
-
Instances of this class are thrown by audit-log readers in case of parsing errors.
- ParseException(String) - Constructor for exception org.jwall.web.audit.io.ParseException
-
Creates a new instance of this class with the message indicating
the cause of the exception.
- parseGrammar(String) - Method in class org.jwall.log.io.ParserGenerator
-
- parseHeader(String) - Method in class org.jwall.web.audit.processor.HttpHeaderParser
-
- parseHeader(String) - Method in class org.jwall.web.http.HttpHeader
-
- parseHttpHeader(Map<String, List<String>>, String) - Static method in class org.jwall.web.audit.io.AuditEventParser
-
This method will read a header section of a ModSecurity event and parse
all the http headers.
- parseMessage(String) - Static method in class org.jwall.web.audit.io.MessageParser
-
- parseMessages(AuditEvent) - Static method in class org.jwall.web.audit.io.MessageParser
-
- parseMetaInfSection(Map<String, List<String>>, String) - Static method in class org.jwall.web.audit.io.AuditEventParser
-
- parseParameters(Map<String, List<String>>, String, String) - Static method in class org.jwall.web.audit.io.AuditEventParser
-
This method parses all parameters (get and post) and fills the appopriate
hashes.
- parseQueryString(String) - Static method in class org.jwall.web.audit.util.ParserUtils
-
Parses the QueryString and returns a hash of (param,value)-pairs.
- Parser<E> - Interface in org.jwall.log.io
-
This interface defines a simple parser definition.
- ParserGenerator - Class in org.jwall.log.io
-
- ParserGenerator(String) - Constructor for class org.jwall.log.io.ParserGenerator
-
- ParserGenerator.Token - Class in org.jwall.log.io
-
- ParserGenerator.Token(String) - Constructor for class org.jwall.log.io.ParserGenerator.Token
-
- ParserUtils - Class in org.jwall.web.audit.util
-
This class provides a set of static methods that are useful for parsing strings,
messages et. al.
- ParserUtils() - Constructor for class org.jwall.web.audit.util.ParserUtils
-
- parseSection(BufferedReader, Data) - Method in class org.jwall.web.audit.io.IronBeeHttpHeaderParser
-
- parseSection(BufferedReader, Data) - Method in class org.jwall.web.audit.io.IronBeeSectionParser
-
- parseSections(String[]) - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- parseStartLine(String) - Method in class org.jwall.web.http.HttpChunk
-
- parseStartLine(String) - Method in class org.jwall.web.http.HttpMessage
-
This method must be overwritten
- parseStartLine(String) - Method in class org.jwall.web.http.HttpRequest
-
- parseStartLine(String) - Method in class org.jwall.web.http.HttpResponse
-
- PasswordFileAuthenticator - Class in org.jwall.web.audit.util
-
This extension of the SimplePasswordAuthenticator class simply reads users and
groups from files which are given to the constructor at instantiation time.
- PasswordFileAuthenticator(File, File) - Constructor for class org.jwall.web.audit.util.PasswordFileAuthenticator
-
This creates a new authenticator which reads users from the given file usersFile.
- PasswordFileAuthenticator(File, File, MessageDigest) - Constructor for class org.jwall.web.audit.util.PasswordFileAuthenticator
-
This creates a new authenticator in the same manner as the above constructor does.
- PATH_INFO - Static variable in class org.jwall.web.audit.ModSecurity
-
- pending - Variable in class org.jwall.web.audit.io.AbstractAuditEventReader
-
The currently pending event
- Permissions - Annotation Type in org.jwall.web.audit.rules
-
This annotation is provided by rule-actions and provides a hint to rule-engines
which permissions should be available before executing an action.
- PersistentCollectionExtractor - Class in org.jwall.web.audit.rules
-
This class provides an extractor method for scores to be read from an event's
K section.
- PersistentCollectionExtractor() - Constructor for class org.jwall.web.audit.rules.PersistentCollectionExtractor
-
- PersistentCollectionProcessor - Class in org.jwall.web.audit.processor
-
This processor extracts collections from the rule-log (i.e. section 'K' of
ModSecurity events).
- PersistentCollectionProcessor() - Constructor for class org.jwall.web.audit.processor.PersistentCollectionProcessor
-
- PM - Static variable in interface org.jwall.web.audit.rules.Condition
-
- polled - Variable in class org.jwall.web.audit.AuditEventQueue
-
A counter of all event that have been read from the queue
- position() - Method in class org.jwall.log.io.MParser
-
- PRAGMA - Static variable in class org.jwall.web.http.HttpHeader
-
- preamble(InputStream) - Method in class org.jwall.web.audit.io.IronBeeAuditReader.IBEventHandler
-
- prefix(String, int) - Method in class org.jwall.log.io.MParser
-
- previous() - Method in class org.jwall.audit.script.utils.ListIteratorImpl
-
- previousIndex() - Method in class org.jwall.audit.script.utils.ListIteratorImpl
-
- print(Object) - Method in class org.jwall.audit.script.utils.TimePrintStream
-
- print(String) - Method in class org.jwall.audit.script.utils.TimePrintStream
-
- println() - Method in class org.jwall.audit.script.utils.TimePrintStream
-
- println(Object) - Method in class org.jwall.audit.script.utils.TimePrintStream
-
- println(String) - Method in class org.jwall.audit.script.utils.TimePrintStream
-
- println(Object) - Method in class org.jwall.audit.script.utils.TimePrintWriter
-
- println(String) - Method in class org.jwall.audit.script.utils.TimePrintWriter
-
- printTime() - Method in class org.jwall.audit.script.utils.TimePrintStream
-
- printTime() - Method in class org.jwall.audit.script.utils.TimePrintWriter
-
- printUsage() - Static method in class org.jwall.AuditServer
-
- process(E) - Method in interface org.jwall.audit.EventProcessorPipeline
-
- process(Data) - Method in class org.jwall.audit.processor.DNSLookup
-
- process(LogMessage) - Method in class org.jwall.log.LogMessageProcessorPipeline
-
- process(AuditEvent) - Method in class org.jwall.web.audit.AuditEventProcessorPipeline
-
- process(Data) - Method in class org.jwall.web.audit.GELFSender
-
- process(Data) - Method in class org.jwall.web.audit.io.IronBeeJSONProcessor
-
- process(Data) - Method in class org.jwall.web.audit.io.IronBeeSectionParser
-
- process(Data) - Method in class org.jwall.web.audit.io.IronBeeTimestampProcessor
-
- process(Data) - Method in class org.jwall.web.audit.processor.HttpHeaderParser
-
- process(Data) - Method in class org.jwall.web.audit.processor.PersistentCollectionProcessor
-
- process(Data) - Method in class org.jwall.web.audit.util.Timestamp
-
- processEvent(E, Map<String, Object>) - Method in interface org.jwall.audit.EventProcessor
-
This method is called upon event reception.
- processEvent(E, Map<String, Object>) - Method in class org.jwall.audit.processor.AbstractEventProcessor
-
- processEvent(AuditEvent, Map<String, Object>) - Method in class org.jwall.audit.processor.DefaultRequestHost
-
- processEvent(AuditEvent, Map<String, Object>) - Method in class org.jwall.audit.processor.DNSLookup
-
- processEvent(AuditEvent, Map<String, Object>) - Method in class org.jwall.audit.processor.JavaScript
-
- processEvent(E, Map<String, Object>) - Method in class org.jwall.audit.rules.EventRuleEngine
-
- processEvent(AuditEvent) - Method in class org.jwall.web.audit.AuditEventProcessorPipeline
-
This method applies all registered processors to the specified event.
- processEvent(AuditEvent, Map<String, Object>) - Method in class org.jwall.web.audit.GELFSender
-
- processEvent(AuditEvent, Map<String, Object>) - Method in class org.jwall.web.audit.processor.JRubyProcessor
-
- processEvent(AuditEvent, Map<String, Object>) - Method in class org.jwall.web.audit.processor.PersistentCollectionProcessor
-
- processEvent(AuditEvent, Map<String, Object>) - Method in class org.jwall.web.audit.processor.RemoteAddressResolver
-
- processEvent(AuditEvent, Map<String, Object>) - Method in class org.jwall.web.audit.processor.RuleTagProcessor
-
- processEvent(AuditEvent, Map<String, Object>) - Method in class org.jwall.web.audit.processor.XForwardedForResolver
-
- processRuleLog(String, Map<String, String>) - Static method in class org.jwall.web.audit.rules.PersistentCollectionExtractor
-
- PROPERTY_DATA_DIR - Static variable in class org.jwall.web.audit.util.RFICollector
-
- PROPERTY_DOWNLOAD - Static variable in class org.jwall.web.audit.util.RFICollector
-
- PROPERTY_FILES_ONLY - Static variable in class org.jwall.web.audit.util.RFICollector
-
- PROPERTY_FOLLOW_FILES - Static variable in class org.jwall.web.audit.util.RFICollector
-
- PROPERTY_LOG_FILE - Static variable in class org.jwall.web.audit.util.RFICollector
-
- PROPERTY_PRESERVE_URL - Static variable in class org.jwall.web.audit.util.RFICollector
-
- PROPERTY_SITE_DIRS - Static variable in class org.jwall.web.audit.util.RFICollector
-
- PROPERTY_TAIL - Static variable in class org.jwall.web.audit.util.RFICollector
-
- PROTOCOL - Static variable in class org.jwall.web.audit.ModSecurity
-
- ProtocolException - Exception in org.jwall.web.http
-
- ProtocolException(String) - Constructor for exception org.jwall.web.http.ProtocolException
-
- PROXY_AUTHENTICATE - Static variable in class org.jwall.web.http.HttpResponse
-
- PROXY_AUTHORIZATION - Static variable in class org.jwall.web.http.HttpRequest
-
- prune() - Method in class org.jwall.web.audit.util.Cache
-
- put(String, V) - Method in class org.jwall.web.audit.util.Cache
-
- RANGE - Static variable in class org.jwall.web.http.HttpRequest
-
- raw(InputStream) - Method in class org.jwall.web.audit.io.IronBeeAuditReader.IBEventHandler
-
- read() - Method in class org.jwall.log.io.SequentialFileInputStream
-
This read method is basically a read of the current open file.
- read(String) - Static method in enum org.jwall.web.audit.filter.BooleanOperator
-
- read(String) - Static method in enum org.jwall.web.audit.filter.Operator
-
- read(ByteBuffer) - Method in class org.jwall.web.http.nio.BufferedReadableByteChannel
-
- readBody(int) - Method in class org.jwall.web.http.nio.HttpMessageChannel
-
This method reads the body of a HTTP message of the given length.
- readBooleanOperator() - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- readChunk() - Method in class org.jwall.web.http.nio.HttpResponseChannel
-
- reader - Variable in class org.jwall.web.audit.io.AbstractAuditEventReader
-
The reader which is used for reading
- READER_WAITING_TIME - Static variable in class org.jwall.web.audit.AuditEventDispatcher
-
The amount of milliseconds the dispatcher waits between polls when waiting for new events
in persistent mode.
- readEvent(String) - Method in class org.jwall.web.audit.io.ConcurrentAuditReader
-
This method creates an audit-event instance from a file.
- readFilterExpression() - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- readHeader() - Method in class org.jwall.web.http.nio.HttpMessageChannel
-
This method tries to read a HTTP message header from the currently
available bytes.
- READING_CHUNK_BODY - Static variable in class org.jwall.web.http.nio.HttpResponseChannel
-
- READING_CHUNK_HEADER - Static variable in class org.jwall.web.http.nio.HttpResponseChannel
-
- READING_CHUNK_TRAILER - Static variable in class org.jwall.web.http.nio.HttpResponseChannel
-
- READING_CRLF - Static variable in class org.jwall.web.http.nio.HttpResponseChannel
-
- readInteger(String) - Method in class org.jwall.log.io.MParser
-
- readLine() - Method in class org.jwall.web.audit.io.DefaultLineReader
-
- readLine() - Method in interface org.jwall.web.audit.io.LineReader
-
- readline() - Method in class org.jwall.web.audit.io.ModSecurity2AuditStream
-
- readLine() - Method in class org.jwall.web.audit.io.SequentialFileReader
-
Read a line from the current file, if the file reveals a 'null' line AND there is
a similarly named file already existing, then switch over to the 'next' file and
start reading from that.
- readLine(boolean) - Method in class org.jwall.web.audit.net.SyslogAuditEventStream
-
- readLine() - Method in class org.jwall.web.audit.util.RFIController
-
- readLine() - Method in class org.jwall.web.http.nio.BufferedReadableByteChannel
-
This method tries to read a full line, terminated by a \n newline
character, from the currently available bytes.
- readMessage() - Method in class org.jwall.web.http.nio.HttpMessageChannel
-
- readMessage() - Method in class org.jwall.web.http.nio.HttpRequestChannel
-
- readMessage() - Method in class org.jwall.web.http.nio.HttpResponseChannel
-
- readMetaInf(String) - Static method in class org.jwall.web.audit.io.AuditEventParser
-
- readNestedExpression() - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- readNext() - Method in interface org.jwall.audit.server.LogHandler
-
- readNext() - Method in class org.jwall.audit.server.ModSecurity2AuditStream
-
- readNext() - Method in class org.jwall.log.io.GenericLogReader
-
- readNext() - Method in interface org.jwall.log.io.LogReader
-
Reads the next LogMessage.
- readNext() - Method in class org.jwall.web.audit.AuditEventQueue
-
- readNext() - Method in class org.jwall.web.audit.io.AbstractAuditEventReader
-
- readNext() - Method in class org.jwall.web.audit.io.AccessLogAuditReader
-
This method reads the next line from the underlying file
and creates an AuditEvent-object from it.
- readNext() - Method in interface org.jwall.web.audit.io.AuditEventReader
-
This method tries to read the next event that is available.
- readNext() - Method in class org.jwall.web.audit.io.ConcurrentAuditReader
-
This method read the next event from the file-system.
- readNext() - Method in class org.jwall.web.audit.io.ConcurrentDirectoryReader
-
- readNext() - Method in class org.jwall.web.audit.io.IronBeeAuditReader
-
- readNext() - Method in class org.jwall.web.audit.io.ModSecurity2AuditReader
-
- readNext() - Method in class org.jwall.web.audit.io.ModSecurity2AuditStream
-
- readNext() - Method in class org.jwall.web.audit.io.ModSecurityAuditReader
-
This method reads another event from the stream.
- readNext() - Method in class org.jwall.web.audit.io.ModSecurityAuditStream
-
- readNext() - Method in class org.jwall.web.audit.net.SyslogAuditEventMultiStream
-
- readNext() - Method in class org.jwall.web.audit.net.SyslogAuditEventStream
-
- readNonNumeric(String) - Method in class org.jwall.log.io.TimeParser
-
- readOperator() - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- readQuoted(char) - Method in class org.jwall.log.io.AccessLogParser.Tokenizer
-
- readQuotedString(char) - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- readRequest() - Method in class org.jwall.web.http.nio.HttpRequestChannel
-
This method returns the next complete request in the input-stream.
- readResolve() - Method in class org.jwall.web.audit.filter.AuditEventDateMatch
-
- readResolve() - Method in class org.jwall.web.audit.filter.AuditEventMatch
-
- readResolve() - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- readSimpleFilter() - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- readTimeUnit(String) - Method in class org.jwall.log.io.TimeParser
-
- readToken(String) - Method in class org.jwall.log.io.MParser
-
- readToken(String, char, char) - Method in class org.jwall.log.io.MParser
-
- readToken(String, int) - Static method in class org.jwall.log.io.MParser
-
- readToken(String, int, String) - Static method in class org.jwall.log.io.MParser
-
- readToken(String, int, char, char) - Static method in class org.jwall.log.io.MParser
-
- readTokenUntil(String, String) - Method in class org.jwall.log.io.MParser
-
- readUntilEOF(InputStream) - Static method in class org.jwall.web.http.nio.CompressionHandler
-
- readValue() - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- readVariable() - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- REC_ACTION - Static variable in class org.jwall.web.audit.IronBeeEventMessage
-
- RECEIVED_AT - Static variable in interface org.jwall.web.audit.AuditEvent
-
A key denoting the time an event has been received
- recycle() - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- REFERER - Static variable in class org.jwall.web.http.HttpRequest
-
- register(Double, EventProcessor<E>) - Method in interface org.jwall.audit.EventProcessorPipeline
-
Register a new event processor in this pipeline.
- register(Double, EventProcessor<LogMessage>) - Method in class org.jwall.log.LogMessageProcessorPipeline
-
- register(Double, EventProcessor<AuditEvent>) - Method in class org.jwall.web.audit.AuditEventProcessorPipeline
-
- registerAlias(String, String) - Static method in class org.jwall.web.audit.IronBeeVariables
-
- registerCollector(String, Properties) - Method in class org.jwall.web.audit.util.RFICollectorServer
-
- registerCollector(String, Properties) - Method in interface org.jwall.web.audit.util.RFICollectorService
-
This method registers a new collector instance which tracks the given
log file.
- registerExtractor(String, FeatureExtractor<AuditEvent, ?>) - Method in class org.jwall.web.audit.rules.ValueExtractor
-
- registerListener(EventListener<AuditEvent>) - Method in class org.jwall.web.audit.AuditEventProcessorPipeline
-
- registerProcessors(AuditEventProcessorPipeline, NodeList) - Static method in class org.jwall.audit.processor.AuditEventProcessorFinder
-
- registerProcessors(AuditEventProcessorPipeline, Element) - Static method in class org.jwall.audit.processor.AuditEventProcessorFinder
-
- REGISTRY_PORT - Static variable in class org.jwall.web.audit.util.RFICollectorServer
-
- RegressionTester - Class in org.jwall.web.audit.test
-
- RegressionTester() - Constructor for class org.jwall.web.audit.test.RegressionTester
-
- remainder(String) - Method in class org.jwall.log.io.MParser
-
- REMOTE_ADDR - Static variable in class org.jwall.web.audit.ModSecurity
-
- REMOTE_HOST - Static variable in class org.jwall.web.audit.ModSecurity
-
- REMOTE_PORT - Static variable in class org.jwall.web.audit.ModSecurity
-
- REMOTE_USER - Static variable in class org.jwall.web.audit.ModSecurity
-
- RemoteAddressResolver - Class in org.jwall.web.audit.processor
-
This processor extracts a possible original remote IP from the Http request
header and places it into the REMOTE_ADDR variable.
- RemoteAddressResolver() - Constructor for class org.jwall.web.audit.processor.RemoteAddressResolver
-
- remove(Object) - Method in class org.jwall.audit.script.utils.AbstractList
-
- remove(int) - Method in class org.jwall.audit.script.utils.AbstractList
-
- remove() - Method in class org.jwall.audit.script.utils.ListIteratorImpl
-
- remove(AuditEventMatch) - Method in class org.jwall.web.audit.filter.AuditEventFilter
-
- remove(int) - Method in class org.jwall.web.audit.filter.AuditEventFilter
-
- remove() - Method in class org.jwall.web.audit.io.AuditEventIterator
-
- remove(String, String) - Static method in class org.jwall.web.audit.io.MessageParser
-
- remove(Condition) - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- remove(EventAction) - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- removeAction(int) - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- removeAll(Collection<?>) - Method in class org.jwall.audit.script.utils.AbstractList
-
- removeAuditEventListener(AuditEventListener) - Method in class org.jwall.web.audit.AuditEventDispatcher
-
Remove the given listener from the list of listeners.
- removeAuditEventListeners() - Method in class org.jwall.web.audit.AuditEventDispatcher
-
This method will clear the list of all listeners currently registered
at this instance.
- removeCondition(int) - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- removeEventListener(AuditEventListener) - Method in class org.jwall.web.audit.net.NetworkAuditEventSource
-
This method removes the given listener.
- removeMatch(String) - Method in class org.jwall.web.audit.filter.AuditEventFilter
-
- removeQuotes(String) - Static method in class org.jwall.web.audit.rules.PersistentCollectionExtractor
-
- removeVariable(String) - Method in class org.jwall.web.audit.session.Session
-
- removeVariable(String) - Method in interface org.jwall.web.audit.session.SessionContext
-
This method shall remove the variable with the given name from the session-context.
- REPONSE_STATUS_AUTH_REQUIRED - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_BASENAME - Static variable in class org.jwall.web.audit.ModSecurity
-
- REQUEST_BODY - Static variable in class org.jwall.web.audit.ModSecurity
-
- REQUEST_COOKIES - Static variable in class org.jwall.web.audit.ModSecurity
-
- REQUEST_COOKIES_NAMES - Static variable in class org.jwall.web.audit.ModSecurity
-
- REQUEST_FILENAME - Static variable in class org.jwall.web.audit.ModSecurity
-
- REQUEST_HEADER - Static variable in class org.jwall.web.audit.ModSecurity
-
- REQUEST_HEADER_ACCEPT - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_HEADER_ACCEPT_ENCODING - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_HEADER_ACCEPT_LANGUAGE - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_HEADER_AUTHORIZATION - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_HEADER_CONNECTION - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_HEADER_CONTENT_TYPE - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_HEADER_HOST - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_HEADER_MODIFIED_SINCE - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_HEADER_REFERER - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_HEADER_USER_AGENT - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_HEADERS - Static variable in class org.jwall.web.audit.ModSecurity
-
- REQUEST_HEADERS - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_HEADERS_NAMES - Static variable in class org.jwall.web.audit.ModSecurity
-
- REQUEST_LINE - Static variable in class org.jwall.web.audit.ModSecurity
-
- REQUEST_METHOD - Static variable in class org.jwall.web.audit.ModSecurity
-
- REQUEST_METHOD_DELETE - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_METHOD_GET - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_METHOD_OPTIONS - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_METHOD_POST - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_METHOD_PUT - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_METHODS - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- REQUEST_PATH - Static variable in class org.jwall.web.audit.ModSecurity
-
- REQUEST_PROTOCOL - Static variable in class org.jwall.web.audit.ModSecurity
-
- REQUEST_URI - Static variable in class org.jwall.web.audit.ModSecurity
-
- REQUEST_URI_RAW - Static variable in class org.jwall.web.audit.ModSecurity
-
- RESERVED_VARIABLES - Static variable in class org.jwall.audit.script.ScriptRunner
-
- reset() - Method in class org.jwall.audit.script.utils.Counter
-
- reset() - Method in class org.jwall.log.io.MParser
-
- reset() - Method in class org.jwall.web.audit.io.IronBeeAuditReader.IBEventHandler
-
- reset() - Method in class org.jwall.web.audit.session.AbstractSessionTracker
-
This method simply resets the session-tracker to the initial state which
holds no sessions.
- reset() - Method in interface org.jwall.web.audit.session.SessionTracker
-
This method resets the tracker to a clean state, forgetting about
all sessions.
- RESPONSE_BODY - Static variable in class org.jwall.web.audit.ModSecurity
-
- RESPONSE_COOKIES - Static variable in class org.jwall.web.audit.ModSecurity
-
- RESPONSE_COOKIES_NAMES - Static variable in class org.jwall.web.audit.ModSecurity
-
- RESPONSE_HEADER - Static variable in class org.jwall.web.audit.ModSecurity
-
- RESPONSE_HEADER_ACCEPT_RANGES - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- RESPONSE_HEADER_CONNECTION - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- RESPONSE_HEADER_CONTENT_LENGTH - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- RESPONSE_HEADER_CONTENT_TYPE - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- RESPONSE_HEADER_ETAG - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- RESPONSE_HEADER_EXPIRES - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- RESPONSE_HEADER_KEEP_ALIVE - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- RESPONSE_HEADER_LAST_MODIFIED - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- RESPONSE_HEADER_PRAGMA - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- RESPONSE_HEADER_SET_COOKIE - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- RESPONSE_HEADER_TRANSFER_ENCODING - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- RESPONSE_HEADERS - Static variable in class org.jwall.web.audit.ModSecurity
-
- RESPONSE_HEADERS - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- RESPONSE_HEADERS_NAMES - Static variable in class org.jwall.web.audit.ModSecurity
-
- RESPONSE_LINE - Static variable in class org.jwall.web.audit.ModSecurity
-
- RESPONSE_PROTOCOL - Static variable in class org.jwall.web.audit.ModSecurity
-
- RESPONSE_STATUS - Static variable in class org.jwall.web.audit.ModSecurity
-
- RESPONSE_STATUS_NOT_FOUND - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- RESPONSE_STATUS_OK - Static variable in interface org.jwall.web.audit.session.HttpProtocol
-
- retainAll(Collection<?>) - Method in class org.jwall.audit.script.utils.AbstractList
-
- RETRY_AFTER - Static variable in class org.jwall.web.http.HttpResponse
-
- reverseLookup(String) - Method in class org.jwall.audit.processor.DNSLookup
-
- REVISION - Static variable in class org.jwall.web.audit.Version
-
- RFICollector - Class in org.jwall.web.audit.util
-
This class scans audit-events for remote-file references in parameters and downloads
all references into a local repository.
- RFICollector(Properties) - Constructor for class org.jwall.web.audit.util.RFICollector
-
- RFICollector(AuditEventReader, Properties) - Constructor for class org.jwall.web.audit.util.RFICollector
-
- RFICollectorServer - Class in org.jwall.web.audit.util
-
This is a simple server which provides a few features for controlling a set of
rfi-collector threads.
- RFICollectorServer() - Constructor for class org.jwall.web.audit.util.RFICollectorServer
-
- RFICollectorService - Interface in org.jwall.web.audit.util
-
This interface defines all methods which are neccessary for creating a new collector,
exploring the list of available listeners and stopping existing ones.
- RFIController - Class in org.jwall.web.audit.util
-
This class is a simple controller which reads commands from standard input
and allows sending commands to running rfi-collectors as well as querying
statistics, stopping them and creating new ones.
- RFIController() - Constructor for class org.jwall.web.audit.util.RFIController
-
- RULE_DATA - Static variable in class org.jwall.web.audit.ModSecurity
-
- RULE_FILE - Static variable in class org.jwall.web.audit.ModSecurity
-
- RULE_ID - Static variable in class org.jwall.web.audit.IronBeeEventMessage
-
- RULE_ID - Static variable in class org.jwall.web.audit.ModSecurity
-
- RULE_LINE - Static variable in class org.jwall.web.audit.ModSecurity
-
- RULE_MSG - Static variable in class org.jwall.web.audit.ModSecurity
-
- RULE_SEV - Static variable in class org.jwall.web.audit.ModSecurity
-
- RULE_TAG - Static variable in class org.jwall.web.audit.ModSecurity
-
- RuleActionContext - Interface in org.jwall.web.audit.rules.actions
-
- RuleContext - Interface in org.jwall.audit.rules
-
This interface defines methods provided by all environments in which a (set of) action(s)
are executed.
- RuleException - Exception in org.jwall.audit.rules
-
- RuleException() - Constructor for exception org.jwall.audit.rules.RuleException
-
- RuleException(String) - Constructor for exception org.jwall.audit.rules.RuleException
-
- RuleTagProcessor - Class in org.jwall.web.audit.processor
-
This process simply parses the EventMessages and extracts all RULE_TAGS to
add them to the TAGS attribute.
- RuleTagProcessor() - Constructor for class org.jwall.web.audit.processor.RuleTagProcessor
-
- run() - Method in class org.jwall.audit.server.AuditEventStreamHandler
-
- run() - Method in class org.jwall.audit.server.ModSecurity2AuditStream
-
- run() - Method in class org.jwall.audit.server.SyslogReceiver
-
- run() - Method in class org.jwall.web.audit.AuditEventDispatcher
-
This is a loop that fetches events from the AuditEventSource
associated with this dispatcher and notifies the registered
listeners.
- run() - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
- run() - Method in class org.jwall.web.audit.io.BufferedAuditEventSource
-
This method loops forever, waiting for new events to arrive.
- run() - Method in class org.jwall.web.audit.io.BufferedAuditEventWriter
-
This method loops until the finished-method has been called.
- run() - Method in class org.jwall.web.audit.io.InputHandler
-
- run() - Method in class org.jwall.web.audit.io.ModSecurity2AuditStream
-
- run() - Method in class org.jwall.web.audit.net.AuditEventMLogcReceiver
-
- run() - Method in class org.jwall.web.audit.net.AuditEventSocketReceiver.AuditEventReaderThread
-
- run() - Method in class org.jwall.web.audit.net.AuditEventSocketReceiver
-
- run() - Method in class org.jwall.web.audit.net.AuditEventStreamHandler
-
- run() - Method in class org.jwall.web.audit.net.NetworkAuditEventSource
-
- run() - Method in class org.jwall.web.audit.net.NetworkClientWorkerThread
-
- run() - Method in class org.jwall.web.audit.net.NetworkEventServer
-
- run() - Method in class org.jwall.web.audit.net.SyslogAuditEventMultiStream
-
- run() - Method in class org.jwall.web.audit.net.SyslogAuditEventStream
-
- run() - Method in class org.jwall.web.audit.net.SyslogReceiverThread
-
- run() - Method in class org.jwall.web.audit.util.RFICollector
-
- run() - Method in class org.jwall.web.audit.util.RFIController
-
- RX - Static variable in interface org.jwall.web.audit.rules.Condition
-
- Script - Interface in org.jwall.audit.script
-
This interface defines the properties of a script definition.
- SCRIPT_BASENAME - Static variable in class org.jwall.web.audit.ModSecurity
-
- SCRIPT_FILENAME - Static variable in class org.jwall.web.audit.ModSecurity
-
- SCRIPT_GID - Static variable in class org.jwall.web.audit.ModSecurity
-
- SCRIPT_GROUPNAME - Static variable in class org.jwall.web.audit.ModSecurity
-
- SCRIPT_MODE - Static variable in class org.jwall.web.audit.ModSecurity
-
- SCRIPT_UID - Static variable in class org.jwall.web.audit.ModSecurity
-
- SCRIPT_USERNAME - Static variable in class org.jwall.web.audit.ModSecurity
-
- ScriptEvent - Class in org.jwall.audit.script
-
- ScriptEvent(Event) - Constructor for class org.jwall.audit.script.ScriptEvent
-
- ScriptEventView<E extends Event> - Class in org.jwall.audit.script
-
This class defines a bridge to access a user's view from within a script such
as a ruby script.
- ScriptEventView(String, EventView<E>) - Constructor for class org.jwall.audit.script.ScriptEventView
-
- ScriptRunner - Class in org.jwall.audit.script
-
This task implements script execution on a cluster.
- ScriptRunner(String) - Constructor for class org.jwall.audit.script.ScriptRunner
-
- ScriptRunner(URL, String) - Constructor for class org.jwall.audit.script.ScriptRunner
-
- ScriptRunner(String, String) - Constructor for class org.jwall.audit.script.ScriptRunner
-
- SEC_MS - Static variable in class org.jwall.web.audit.util.TimeFormat
-
- SECOND - Static variable in class org.jwall.log.io.TimeParser
-
- SECTION_AUDIT_LOG_FOOTER - Static variable in class org.jwall.web.audit.ModSecurity
-
The index of the audit-log footer.
- SECTION_AUDIT_LOG_HEADER - Static variable in class org.jwall.web.audit.ModSecurity
-
The index of the audit log header.
- SECTION_AUDIT_TRAILER - Static variable in class org.jwall.web.audit.ModSecurity
-
The index of the audit-log trailer.
- SECTION_BOUNDARY_KEY - Static variable in class org.jwall.web.audit.IronBeeAuditEvent
-
- SECTION_FINAL_RESPONSE_HEADER - Static variable in class org.jwall.web.audit.ModSecurity
-
The index of the final response-header.
- SECTION_FORM_DATA - Static variable in class org.jwall.web.audit.ModSecurity
-
The index of the form-data string.
- SECTION_META_INF - Static variable in class org.jwall.web.audit.ModSecurity
-
- SECTION_NAMES - Static variable in class org.jwall.web.audit.ModSecurity
-
- SECTION_REQUEST_BODY - Static variable in class org.jwall.web.audit.ModSecurity
-
The index of the request-body.
- SECTION_REQUEST_HEADER - Static variable in class org.jwall.web.audit.ModSecurity
-
The index of the request-header.
- SECTION_RESPONSE_BODY - Static variable in class org.jwall.web.audit.ModSecurity
-
The index of the response-body.
- SECTION_RULE_LOG - Static variable in class org.jwall.web.audit.ModSecurity
-
This section holds a list of executed rules (since ModSecurity 2.5.x)
- SECTION_TEST - Static variable in class org.jwall.web.audit.ModSecurity
-
- SECTIONS - Static variable in class org.jwall.web.audit.ModSecurity
-
A string holding all characters that refer to a specific section of an
audit-event.
- sendAuditEvent(AuditEvent) - Method in class org.jwall.web.audit.net.AuditEventConsoleSender
-
This method sends the given audit-event to the configured console.
- sendAuditEvent(AuditEvent) - Method in class org.jwall.web.audit.net.AuditEventURLConnectionSender
-
This method sends the given audit-event to the configured console.
- SENSOR - Static variable in interface org.jwall.web.audit.AuditEvent
-
This simply serves as alias for SENSOR_NAME
- SENSOR_ADDR - Static variable in interface org.jwall.web.audit.AuditEvent
-
- SENSOR_ID - Static variable in interface org.jwall.web.audit.AuditEvent
-
This variable holds the ID of the sensor from which this event was
received (if available)
- SENSOR_NAME - Static variable in interface org.jwall.web.audit.AuditEvent
-
This variable holds the name of the sensor from which this event was
received (if available)
- SENSOR_TYPE - Static variable in interface org.jwall.web.audit.AuditEvent
-
- SequentialFileInputStream - Class in org.jwall.log.io
-
This class implements an input stream that will read from a sequence of files.
- SequentialFileInputStream(File) - Constructor for class org.jwall.log.io.SequentialFileInputStream
-
Creates a new SequentialInputStream, which will read the specified file and
any subsequent files that match the file's name, possibly and a appended
number, i.e. for the file /tmp/test.log the stream will read
/tmp/test.log
/tmp/test.log.1
/tmp/test.log.2
...
- SequentialFileInputStream(File, boolean) - Constructor for class org.jwall.log.io.SequentialFileInputStream
-
This creates a SequentialInputStream which will remove any files that have
completeley been read (i.e. they have been processed until EOF and
another, newer file matching the pattern does exist).
- SequentialFileInputStream(File, String, boolean) - Constructor for class org.jwall.log.io.SequentialFileInputStream
-
- SequentialFileReader - Class in org.jwall.web.audit.io
-
- SequentialFileReader(File) - Constructor for class org.jwall.web.audit.io.SequentialFileReader
-
- SequentialFileReader(File, long, boolean) - Constructor for class org.jwall.web.audit.io.SequentialFileReader
-
- serialVersionUID - Static variable in exception org.jwall.web.audit.SyntaxException
-
- serialVersionUID - Static variable in exception org.jwall.web.http.MessageFormatException
-
- serialVersionUID - Static variable in exception org.jwall.web.http.ProtocolException
-
- SERVER - Static variable in class org.jwall.web.http.HttpResponse
-
- SERVER_ADDR - Static variable in class org.jwall.web.audit.ModSecurity
-
- SERVER_NAME - Static variable in class org.jwall.web.audit.ModSecurity
-
- SERVER_PORT - Static variable in class org.jwall.web.audit.ModSecurity
-
- SERVICE_NAME - Static variable in interface org.jwall.web.audit.util.RFICollectorService
-
- SESSION - Static variable in class org.jwall.web.audit.ModSecurity
-
- Session - Class in org.jwall.web.audit.session
-
This class implements a data storage of some key-value-pairs, all associated
with a unique session-id.
- Session(int, String, AuditEvent) - Constructor for class org.jwall.web.audit.session.Session
-
Creates a new session with the given session-identifier and the first
event of the session being evt.
- SESSION_ID - Static variable in interface org.jwall.web.audit.AuditEvent
-
- SessionContext - Interface in org.jwall.web.audit.session
-
This interface defines an abstract session context that is associated with a session-identifier
and provides features like setting variables and removing or expiring variables of session scope.
- SESSIONID - Static variable in class org.jwall.web.audit.ModSecurity
-
- sessionTimeOut - Variable in class org.jwall.web.audit.session.AbstractSessionTracker
-
- SessionTracker - Interface in org.jwall.web.audit.session
-
This interface defines the basic function of a session tracker.
- set(String, String) - Method in interface org.jwall.audit.Event
-
- set(String, Object) - Method in interface org.jwall.audit.rules.RuleContext
-
This method allows for setting a specific object in the context.
- set(String, String) - Method in class org.jwall.audit.script.ScriptEvent
-
- set(int, E) - Method in class org.jwall.audit.script.utils.AbstractList
-
- set(String, Double) - Method in class org.jwall.audit.script.utils.Counter
-
- set(ScriptEvent) - Method in class org.jwall.audit.script.utils.ListIteratorImpl
-
- set(String, String) - Method in interface org.jwall.log.LogMessage
-
- set(String, String) - Method in class org.jwall.log.LogMessageImpl
-
- set(T, Double) - Method in class org.jwall.log.LogMessageProcessorPipeline.Order
-
- set(String, String) - Method in class org.jwall.web.audit.AuditData
-
- set(String, String) - Method in interface org.jwall.web.audit.AuditEvent
-
This method can be used to modify/set properties of the event.
- set(String, String) - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- set(String, Serializable) - Method in class org.jwall.web.audit.IronBeeEventMessage
-
- set(String, String) - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- set(String, String) - Method in class org.jwall.web.audit.util.MacroExpander
-
- set(String, String) - Method in class org.jwall.web.audit.util.VariableContext
-
- setActions(Set<EventAction>) - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- setAddress(String) - Method in class org.jwall.web.audit.GELFSender
-
- setAll(String, List<String>) - Method in interface org.jwall.web.audit.AuditEvent
-
This method can be used to modify/set a collection of the event.
- setAll(String, List<String>) - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- setAll(String, List<String>) - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- setAuditEventView(EventView<AuditEvent>) - Method in class org.jwall.audit.script.ScriptRunner
-
- setBody(ByteBuffer) - Method in class org.jwall.web.http.HttpResponse
-
- setBooleanOperators(Set<BooleanOperator>) - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- setCacheSize(Integer) - Method in class org.jwall.audit.processor.DNSLookup
-
- setChannel(HttpResponseChannel) - Method in class org.jwall.web.http.HttpResponse
-
- setCollection(String) - Method in class org.jwall.web.audit.processor.HttpHeaderParser
-
- setComment(String) - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- setComparator(String) - Method in class org.jwall.web.audit.filter.AuditEventDateMatch
-
- setConditions(List<Condition>) - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- setDate(Date) - Method in class org.jwall.web.audit.filter.AuditEventDateMatch
-
- setDate(Date) - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- setDateFormat(String) - Method in class org.jwall.log.io.GenericLogParser
-
- setDatePattern(String) - Method in class org.jwall.log.io.GenericLogParser
-
- setDefault(String, String) - Method in class org.jwall.log.io.GenericLogParser
-
- setDefault(String, String) - Method in class org.jwall.log.io.GenericLogReader
-
- setDefaults(Map<String, String>) - Method in class org.jwall.log.io.GenericLogParser
-
- setDefaults(Map<String, String>) - Method in class org.jwall.log.io.GenericLogReader
-
- setDefaults(Map<String, String>) - Method in class org.jwall.log.io.GenericParser
-
- setDefaults(Map<String, String>) - Method in interface org.jwall.log.io.LogReader
-
This sets a number of default properties, which will be given to all messages
created by the implementing reader.
- setDefaults(Map<String, String>) - Method in interface org.jwall.log.io.Parser
-
- setDefaults(Map<String, String>) - Method in class org.jwall.log.io.TimeParser
-
- setEnabled(boolean) - Method in class org.jwall.audit.processor.AbstractEventProcessor
-
- setEnabled(boolean) - Method in class org.jwall.web.audit.filter.AuditEventFilter
-
- setEnabled(boolean) - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- setErrorWriter(Writer) - Method in class org.jwall.audit.script.ScriptRunner
-
- setEventStore(AuditEventListener) - Method in class org.jwall.audit.server.AuditEventStreamHandler
-
- setFile(String) - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- setFilter(AuditEventFilter) - Method in class org.jwall.web.audit.AuditEventQueue
-
This method sets a filter for the queue instance.
- setFilter(AuditEventFilter) - Method in interface org.jwall.web.audit.io.AuditEventSource
-
This sets a filter on the source.
- setFilter(AuditEventFilter) - Method in class org.jwall.web.audit.io.BufferedAuditEventSource
-
- setFilter(AuditEventFilter) - Method in class org.jwall.web.audit.net.NetworkAuditEventSource
-
- setFormat(String) - Method in class org.jwall.web.audit.util.Timestamp
-
- setFrom(String) - Method in class org.jwall.web.audit.processor.RemoteAddressResolver
-
- setFrom(String) - Method in class org.jwall.web.audit.util.Timestamp
-
- setInetAddress(InetAddress) - Method in class org.jwall.web.audit.session.Session
-
- setKey(String) - Method in class org.jwall.audit.processor.DNSLookup
-
- setKey(String) - Method in class org.jwall.web.audit.GELFSender
-
- setKey(String) - Method in class org.jwall.web.audit.processor.PersistentCollectionProcessor
-
- setKey(String) - Method in class org.jwall.web.audit.util.Timestamp
-
- setLine(Integer) - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- setLineNumber(int) - Method in exception org.jwall.web.audit.SyntaxException
-
- setLogMessageView(EventView<LogMessage>) - Method in class org.jwall.audit.script.ScriptRunner
-
- setMatch(String) - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- setMatchAll(boolean) - Method in class org.jwall.web.audit.rules.AuditEventRule
-
- setOldFileHandler(FileHandler) - Method in class org.jwall.web.audit.io.SequentialFileReader
-
- setOperator(String) - Method in class org.jwall.audit.Match
-
- setOutputWriter(Writer) - Method in class org.jwall.audit.script.ScriptRunner
-
- setPersistent(boolean) - Method in class org.jwall.web.audit.AuditEventDispatcher
-
This methods can be used to set the dispatcher into persistent or non-persistent mode.
- setPort(Integer) - Method in class org.jwall.web.audit.GELFSender
-
- setPrefix(String) - Method in class org.jwall.web.audit.GELFSender
-
- setPriority(Double) - Method in class org.jwall.audit.processor.AbstractEventProcessor
-
- setReleased(Date) - Method in class org.jwall.Version
-
- setResults(Map<String, Object>) - Method in class org.jwall.audit.script.ScriptRunner
-
- setResultUrl(URL) - Method in interface org.jwall.audit.script.Script
-
- setRevision(String) - Method in class org.jwall.Version
-
- setRuleData(String) - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- setRuleId(String) - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- setRuleMsg(String) - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- setRules(List<EventRule<E>>) - Method in class org.jwall.audit.rules.EventRuleEngine
-
- setRuleTags(List<String>) - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- setScore(double) - Method in class org.jwall.web.audit.session.Session
-
- setSeparator(String) - Method in class org.jwall.web.audit.processor.RuleTagProcessor
-
- setSessionId(String) - Method in interface org.jwall.web.audit.AuditEvent
-
Deprecated.
Use set( "SESSION_ID", id ) instead.
- setSessionId(String) - Method in class org.jwall.web.audit.IronBeeAuditEvent
-
- setSessionId(String) - Method in class org.jwall.web.audit.ModSecurityAuditEvent
-
- setSessionTimeOut(long) - Method in class org.jwall.web.audit.session.AbstractSessionTracker
-
This method is used to set the session-timeout.
- setSessionTimeOut(long) - Method in interface org.jwall.web.audit.session.SessionTracker
-
This method sets the session timeout.
- setSeverity(Integer) - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- setSocketAuthenticator(SocketAuthenticator) - Method in class org.jwall.web.audit.net.SyslogReceiverThread
-
- setSteadyWriter(boolean) - Method in class org.jwall.web.audit.io.AuditLogFileWriter
-
A writer not being steady just writes it queue on disk and exits.
- setStrictParsing(boolean) - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- setStrictSessions(boolean) - Method in class org.jwall.web.audit.session.AbstractSessionTracker
-
In a strict session the session-id is presumed to be created by the
server-side application.
- setStrictSessions(boolean) - Method in interface org.jwall.web.audit.session.SessionTracker
-
Enables strict-mode for tracking/creating new sessions.
- setTag(String) - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- setTarget(String) - Method in class org.jwall.audit.processor.DNSLookup
-
- setText(String) - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- setTimeout(Integer) - Method in class org.jwall.web.http.nio.HttpMessageChannel
-
This method is used to set the timeout (in milliseconds) of the
channel.
- setTxId(String) - Method in class org.jwall.web.audit.ModSecurityEventMessage
-
- setUser(String) - Method in class org.jwall.web.audit.processor.RuleTagProcessor
-
- setValue(String) - Method in class org.jwall.audit.Match
-
- setValue(String) - Method in class org.jwall.audit.processor.DefaultRequestHost
-
A simple setter for the default host value.
- setValue(Map<String, List<String>>, String, String) - Static method in class org.jwall.web.audit.io.AuditEventParser
-
- setValue(String) - Method in class org.jwall.web.audit.rules.operators.AbstractCondition
-
- setVariable(String) - Method in class org.jwall.audit.Match
-
- setVariable(String) - Method in interface org.jwall.web.audit.rules.Condition
-
Sets the variable on which this condition needs to match.
- setVariable(String) - Method in class org.jwall.web.audit.rules.operators.AbstractCondition
-
- setVariable(String, String, Date) - Method in class org.jwall.web.audit.session.Session
-
- setVariable(String, String, Date) - Method in interface org.jwall.web.audit.session.SessionContext
-
This method creates a new variable with the given name and initializes it to the
value provided by value.
- setVersion(String) - Method in class org.jwall.Version
-
- SEVERITIES - Static variable in class org.jwall.web.audit.ModSecurity
-
- SEVERITY - Static variable in interface org.jwall.web.audit.AuditEvent
-
- SEVERITY_NOT_SET - Static variable in class org.jwall.web.audit.ModSecurity
-
- SEVERITY_UNKNOWN - Static variable in class org.jwall.web.audit.ModSecurity
-
- SHORT_FORMAT - Static variable in class org.jwall.web.audit.util.TimeFormat
-
- shutdown() - Method in class org.jwall.web.audit.net.SyslogReceiverThread
-
- SimpleLineFormatter - Class in org.jwall.web.audit.util
-
This simple formatter extends the simple formatter provided by the Java logging
framework and behaves pretty equally except that it does print all messages into
one line.
- SimpleLineFormatter() - Constructor for class org.jwall.web.audit.util.SimpleLineFormatter
-
- SimplePasswordAuthenticator - Class in org.jwall.web.audit.util
-
- SimplePasswordAuthenticator(Properties, Properties) - Constructor for class org.jwall.web.audit.util.SimplePasswordAuthenticator
-
This creates a new authenticator which reads users from the given file usersFile.
- SimplePasswordAuthenticator(Properties, Properties, MessageDigest) - Constructor for class org.jwall.web.audit.util.SimplePasswordAuthenticator
-
This creates a new authenticator in the same manner as the above constructor does.
- SimpleURLDecoder - Class in org.jwall.web.audit.util
-
Deprecated.
- SimpleURLDecoder() - Constructor for class org.jwall.web.audit.util.SimpleURLDecoder
-
Deprecated.
- SITE_ID - Static variable in interface org.jwall.web.audit.AuditEvent
-
This variable denotes the site-id to which this event is mapped
- SITE_NAME - Static variable in interface org.jwall.web.audit.AuditEvent
-
This variable references the site-name to which this event is mapped
- size() - Method in class org.jwall.audit.script.EventList
-
- size() - Method in class org.jwall.audit.script.utils.AbstractList
-
- SIZE - Static variable in interface org.jwall.web.audit.AuditEvent
-
- size() - Method in class org.jwall.web.audit.AuditEventQueue
-
This returns the number of events currently in the queue.
- size() - Method in class org.jwall.web.audit.filter.FilterExpressionList
-
- size() - Method in class org.jwall.web.audit.util.Cache
-
- size() - Method in class org.jwall.web.http.HttpChunk
-
- skip(int) - Method in class org.jwall.log.io.MParser
-
- skip(Long) - Method in class org.jwall.web.audit.io.DefaultLineReader
-
- skip(Long) - Method in interface org.jwall.web.audit.io.LineReader
-
- skip(Long) - Method in class org.jwall.web.audit.io.SequentialFileReader
-
- skipBlanks(String) - Method in class org.jwall.log.io.MParser
-
- skipLength(String) - Method in class org.jwall.log.io.ParserGenerator.Token
-
- skipWhiteSpace() - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- SocketAuthenticator - Interface in org.jwall.web.audit.net
-
- SOURCE - Static variable in interface org.jwall.log.LogMessage
-
- SP - Static variable in class org.jwall.web.http.HttpHeader
-
- splitAccessLine(String) - Static method in class org.jwall.web.audit.io.AccessLogAuditReader
-
This method splits the given line into tokens.
- splitQuotedString(String) - Static method in class org.jwall.web.audit.util.ParserUtils
-
Splits a string which might contain quoted substrings.
- splitQuotedString(String, String) - Static method in class org.jwall.web.audit.util.ParserUtils
-
- splitQuotedString(String, String, String) - Static method in class org.jwall.web.audit.util.ParserUtils
-
This method splits a possible quoted String into tokens, respecting the quotations.
- splitRespectQuotes(String, char) - Static method in class org.jwall.web.audit.util.QuotedStringTokenizer
-
- SSLNetworkAuditEventSource - Class in org.jwall.web.audit.net
-
This class is an SSL-enabled implementation of the network audit event source.
- start() - Method in class org.jwall.web.audit.net.NetworkEventServer
-
- startBodyPart() - Method in class org.jwall.web.audit.io.IronBeeAuditReader.IBEventHandler
-
- startHeader() - Method in class org.jwall.web.audit.io.IronBeeAuditReader.IBEventHandler
-
- startMessage() - Method in class org.jwall.web.audit.io.IronBeeAuditReader.IBEventHandler
-
- startMultipart(BodyDescriptor) - Method in class org.jwall.web.audit.io.IronBeeAuditReader.IBEventHandler
-
- startsWith(String) - Method in class org.jwall.web.audit.filter.ExpressionReader
-
- STATE_CLOSE_CONNECTION - Static variable in class org.jwall.web.http.nio.HttpResponseChannel
-
- STATE_READING_BODY - Static variable in class org.jwall.web.http.nio.HttpMessageChannel
-
After the header has been read, this constant defines the body-reading phase
- STATE_READING_CHUNKS - Static variable in class org.jwall.web.http.nio.HttpResponseChannel
-
- STATE_READING_HEADER - Static variable in class org.jwall.web.http.nio.HttpMessageChannel
-
This constant defines the state from the start until a complete message header has been read
- status() - Method in class org.jwall.web.http.nio.HttpResponseChannel
-
- storeMetaInf(Map<String, String>) - Static method in class org.jwall.web.audit.io.AuditEventParser
-
- STRICT_PARSING - Static variable in class org.jwall.web.audit.filter.ExpressionReader
-
- strip(String) - Method in class org.jwall.log.io.GenericParser
-
- subList(int, int) - Method in class org.jwall.audit.script.utils.AbstractList
-
- substitute(String, AuditEvent) - Method in class org.jwall.web.audit.util.MacroExpander
-
- sum(Collection<String>) - Method in class org.jwall.audit.script.utils.Counter
-
- SX - Static variable in interface org.jwall.web.audit.rules.Condition
-
- SyntaxException - Exception in org.jwall.web.audit
-
This exception is thrown whenever a syntax-error occurs.
- SyntaxException(String) - Constructor for exception org.jwall.web.audit.SyntaxException
-
Creates a SyntaxException with the given message.
- SyntaxException(String, int) - Constructor for exception org.jwall.web.audit.SyntaxException
-
- SyslogAuditEventMultiStream - Class in org.jwall.web.audit.net
-
This class implements a parser for audit-logfile for the modsecurity2.
- SyslogAuditEventMultiStream(InputStream, AuditEventListener) - Constructor for class org.jwall.web.audit.net.SyslogAuditEventMultiStream
-
This constructor creates an audit-event-Reader that reads from the
given input stream.
- SyslogAuditEventStream - Class in org.jwall.web.audit.net
-
This class implements a parser for audit-logfile for the modsecurity2.
- SyslogAuditEventStream(InputStream, AuditEventListener) - Constructor for class org.jwall.web.audit.net.SyslogAuditEventStream
-
This constructor creates an audit-event-Reader that reads from the
given input stream.
- SyslogAuditEventStream(InputStream, AuditEventListener, boolean) - Constructor for class org.jwall.web.audit.net.SyslogAuditEventStream
-
This constructor creates an audit-event-Reader that reads from the
given input stream.
- SyslogAuditEventStream(FileReader, AuditEventListener, boolean) - Constructor for class org.jwall.web.audit.net.SyslogAuditEventStream
-
- SyslogAuditEventStream(File, AuditEventListener) - Constructor for class org.jwall.web.audit.net.SyslogAuditEventStream
-
- SyslogAuditEventStream(File, AuditEventListener, boolean) - Constructor for class org.jwall.web.audit.net.SyslogAuditEventStream
-
- SyslogReceiver - Class in org.jwall.audit.server
-
- SyslogReceiver(InetAddress, Integer, Class<?>) - Constructor for class org.jwall.audit.server.SyslogReceiver
-
- SyslogReceiverThread - Class in org.jwall.web.audit.net
-
This class is the central syslog-server thread.
- SyslogReceiverThread(AuditEventListener, Integer) - Constructor for class org.jwall.web.audit.net.SyslogReceiverThread
-
- SyslogReceiverThread(AuditEventListener, InetAddress, Integer) - Constructor for class org.jwall.web.audit.net.SyslogReceiverThread
-
- value - Variable in class org.jwall.log.io.MParser.Pair
-
- ValueExtractor - Class in org.jwall.web.audit.rules
-
This class extracts the values for the given variable for an event.
- ValueExtractor() - Constructor for class org.jwall.web.audit.rules.ValueExtractor
-
Create a new extractor and initialize the available variables.
- valueOf(String) - Static method in enum org.jwall.audit.EventType
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.jwall.web.audit.AuditEventType
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.jwall.web.audit.filter.BooleanOperator
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.jwall.web.audit.filter.Operator
-
Returns the enum constant of this type with the specified name.
- values() - Static method in enum org.jwall.audit.EventType
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values - Variable in class org.jwall.audit.Match
-
- values() - Static method in enum org.jwall.web.audit.AuditEventType
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum org.jwall.web.audit.filter.BooleanOperator
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum org.jwall.web.audit.filter.Operator
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values - Variable in class org.jwall.web.audit.rules.actions.AbstractEventAction
-
- VAR_PREFIX - Static variable in class org.jwall.web.audit.util.MacroExpander
-
- VAR_PREFIX - Static variable in class org.jwall.web.audit.util.VariableContext
-
- VAR_SUFFIX - Static variable in class org.jwall.web.audit.util.MacroExpander
-
- VAR_SUFFIX - Static variable in class org.jwall.web.audit.util.VariableContext
-
- variable - Variable in class org.jwall.audit.Match
-
- VariableContext - Class in org.jwall.web.audit.util
-
- VariableContext(VariableContext) - Constructor for class org.jwall.web.audit.util.VariableContext
-
- VariableContext(Map<String, String>) - Constructor for class org.jwall.web.audit.util.VariableContext
-
- VariableContext(Properties) - Constructor for class org.jwall.web.audit.util.VariableContext
-
- VariableMapping - Class in org.jwall.web.audit
-
- VariableMapping() - Constructor for class org.jwall.web.audit.VariableMapping
-
- VARIABLES - Static variable in class org.jwall.log.LogMessageExtractor
-
- VARIABLES - Static variable in interface org.jwall.web.audit.AuditEvent
-
- VARIABLES - Static variable in class org.jwall.web.audit.ModSecurity
-
- VARY - Static variable in class org.jwall.web.http.HttpResponse
-
- VER - Static variable in class org.jwall.web.audit.Version
-
- VERSION - Static variable in class org.jwall.AuditServer
-
- VERSION - Static variable in class org.jwall.Collector
-
- Version - Class in org.jwall
-
This is a simple class for providing version information about this
package.
- Version(String, String, Date) - Constructor for class org.jwall.Version
-
- Version(String, String, String, String, String, Date) - Constructor for class org.jwall.Version
-
- VERSION - Static variable in class org.jwall.web.audit.io.AuditLogFileWriter
-
- VERSION - Static variable in class org.jwall.web.audit.util.RFICollector
-
- Version - Class in org.jwall.web.audit
-
This class implements some version information of this java library.
- Version() - Constructor for class org.jwall.web.audit.Version
-
- VERSION - Static variable in class org.jwall.web.audit.Version
-
- version - Variable in class org.jwall.web.http.HttpMessage
-
- VIA - Static variable in class org.jwall.web.http.HttpHeader
-