Source Code for Module ioids.config

  1  """ 
  2  Main Configuration file for IOIDS 
  3   
  4  Inter-Organisational Intrusion Detection System (IOIDS) 
  5   
  6  Modules import that module and may read the settings important to them. 
  7   
  8  Options provided here: 
  9      1. General options (name, organisation, location, ...) 
 10      2. Data processing options 
 11      3. Logging options 
 12      4. G4DS Connection parameters 
 13      5. Database connection parameters 
 14      6. Database extension information 
 15   
 16  @author: Michael Pilgermann 
 17  @contact: mailto:mpilgerm@glam.ac.uk 
 18  @license: GPL (General Public License) 
 19  """ 
 20   
 21  ## ######################################## 
 22  ## 
 23  ## General options 
 24  ## 
 25   
 26  # Version of IOIDS - important for setup (site packages) - you should not change this 
 27  VERSION = "0.1" 
 28   
 29  # put your local address information to be inserted into the database for events 
 30  LOCAL_ADDRESS = '192.168.1.120' 
 31  LOCAL_HOSTNAME = 'pchome.kichkasch.co.uk' 
 32  LOCAL_MAC = None 
 33  LOCAL_OS = 'Gentoo Linux' 
 34  LOCAL_DOMAIN = None 
 35  LOCAL_COMPUTER_TYPE = 'pc x86' 
 36   
 37  ## ######################################## 
 38  ## 
 39  ## Data processing options 
 40  ## 
 41   
 42  # interval between two queue checkings of the data engine 
 43  DATA_ENGINE_PROCESSING_INTERVAL = 5     # seconds 
 44   
 45  # path of file(s) containing ioids policy rules 
 46  LOCATION_POLICY_FILES = ['descriptions/ioids_policy.xml'] 
 47   
 48  ## ######################################## 
 49  ## 
 50  ## Logging options 
 51  ## 
 52  ## Configure log level 
 53  ##  0 - Critical errors only 
 54  ##  1 -  
 55  ##  2 -  
 56  ##  3 -  
 57  ##  4 - 
 58  ##  5 - All messages 
 59  ## 
 60   
 61  # 1) ioids internal logging 
 62  # 
 63  # Logfile location 
 64  #LOGGING_FILENAME = '/var/log/ioids.log'        # common system log directory (requires root priveleges usually) 
 65  LOGGING_FILENAME = './ioids.log'                      # current directory 
 66  # Logging level (0 critical logs - 5 all logs) 
 67  LOGGING_LEVEL = 4 
 68   
 69  # 2) Logging into syslog 
 70  ENABLE_SYSLOG = 0 
 71  SYSLOG_IDENTIFIER = 'ioids' 
 72   
 73  ## ######################################## 
 74  ## 
 75  ## G4DS Connection options 
 76  ## 
 77   
 78  # ID for this service within G4DS as it is given in the G4DS IOIDS service description 
 79  G4DS_SERVICE_ID = 'S07112005ioids001' 
 80   
 81  # location of private key for connection against G4DS 
 82  LOCATION_PRIVATE_KEY = './g4dskey' 
 83   
 84  # your member id in G4DS 
 85  G4DS_MEMBER_ID = 'M111' 
 86   
 87  ## ######################################## 
 88  ## 
 89  ## Database connection options 
 90  ## 
 91   
 92  # type of connection 
 93  #   currently supported: 'xmlrpc' - XML encoded database requests 
 94  DATABASE_CONNECTION_TYPE = 'xmlrpc' 
 95   
 96  # address and port of the Database SOAP Server 
 97  SOAP_DB_ADDRESS = 'localhost' 
 98  SOAP_DB_PORT = '9900' 
 99  SOAP_SERVER_URL = 'http://' + SOAP_DB_ADDRESS + ':' + SOAP_DB_PORT 
100   
101  # how often shall the IOIDS core check for new events on the local database 
102  # specify time interval between two polls in seconds 
103  DB_POLL_INTERVAL = 60   # ones in a minute 
104  DB_POLL_INTERVAL = 5   # 5 seconds - testing purposes 
105   
106  # location for status file in file system - needed for remembering the latest event ids for trigger mechanism 
107  LOCATION_EVENT_ID_STATUS_FILE = './event_status.dat' 
108   
109  # Datatype of the connected database (connected to the XML RPC interface) 
110  DB_DATA_TYPE = 'Postgresv8.0' 
111   
112  # IOIDS Event type 
113  IOIDS_EVENT_TYPE = 'ioids' 
114   
115  ## ######################################## 
116  ## 
117  ## Database extension information 
118  ## 
119  SOAPSY_EXTENSIONS = {} 
120   
121  # snortdb extension 
122  import snortdb_extension 
123  snortdb = {} 
124  snortdb['dbconnector'] = snortdb_extension.getDBConnector 
125  snortdb['messagewrapper'] = snortdb_extension.getMessageWrapper 
126   
127  import ioids_extension 
128  db_ioids = {} 
129  db_ioids['dbconnector'] = ioids_extension.getDBConnector 
130  db_ioids['messagewrapper'] = ioids_extension.getMessageWrapper 
131   
132  SOAPSY_EXTENSIONS['snortdb'] = snortdb 
133  SOAPSY_EXTENSIONS['ioids'] = db_ioids 
134