/* sm_cust_bindcdr.c * This is a custom developed plugin to process bind information into * a specific SQL statement. While the actual processing may be too specific * to be of general use, this module serves as a template on how this type * of processing can be done. * * Format generated: * "%TIMESTAMP:::date-rfc3339% %HOSTNAME% %syslogtag%%msg:::sp-if-no-1st-sp%%msg:::drop-last-lf%\n" * Note that this is the same as smtradfile.c, except that we do have a RFC3339 timestamp. However, * we have copied over the code from there, it is too simple to go through all the hassle * of having a single code base. * * NOTE: read comments in module-template.h to understand how this file * works! * * File begun on 2011-03-17 by RGerhards * * Copyright 2011 Rainer Gerhards and Adiscon GmbH. * * This file is part of rsyslog. * * Rsyslog is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * Rsyslog is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with Rsyslog. If not, see . * * A copy of the GPL can be found in the file "COPYING" in this distribution. */ #include "config.h" #include "rsyslog.h" #include #include #include #include #include #include "conf.h" #include "syslogd-types.h" #include "template.h" #include "msg.h" #include "module-template.h" #include "unicode-helper.h" MODULE_TYPE_STRGEN MODULE_TYPE_NOKEEP STRGEN_NAME("Custom_BindCDR,sql") /* internal structures */ DEF_SMOD_STATIC_DATA /* config data */ /* This strgen tries to minimize the amount of reallocs be first obtaining pointers to all strings * needed (including their length) and then calculating the actual space required. So when we * finally copy, we know exactly what we need. So we do at most one alloc. */ //#define SQL_STMT "INSERT INTO CDR(date,time,client,view,query,ip) VALUES ('" //#define SQL_STMT "INSERT INTO bind_test(`Date`,`time`,client,view,query,ip) VALUES ('" #define SQL_STMT "INSERT INTO bind_test(`Date`,ip) VALUES ('" #define ADD_SQL_DELIM \ memcpy(*ppBuf + iBuf, "', '", sizeof("', '") - 1); \ iBuf += sizeof("', '") - 1; #define SQL_STMT_END "');\n" BEGINstrgen register int iBuf; uchar *psz; uchar *pTimeStamp; uchar szClient[64]; unsigned lenClient; uchar szView[64]; unsigned lenView; uchar szQuery[64]; unsigned lenQuery; uchar szIP[64]; unsigned lenIP; size_t lenTimeStamp; size_t lenTotal; CODESTARTstrgen /* first create an empty statement. This is to be replaced if * we have better data to fill in. */ /* now make sure buffer is large enough */ if(*pLenBuf < 2) CHKiRet(ExtendBuf(ppBuf, pLenBuf, 2)); memcpy(*ppBuf, ";", sizeof(";")); /* first obtain all strings and their length (if not fixed) */ pTimeStamp = (uchar*) getTimeReported(pMsg, tplFmtRFC3339Date); lenTimeStamp = ustrlen(pTimeStamp); /* "client" */ psz = (uchar*) strstr((char*) getMSG(pMsg), "client "); if(psz == NULL) { dbgprintf("Custom_BindCDR: client part in msg missing\n"); FINALIZE; } else { psz += sizeof("client ") - 1; /* skip "label" */ for( lenClient = 0 ; *psz && *psz != '#' && lenClient < sizeof(szClient) - 1 ; ++lenClient) { szClient[lenClient] = *psz++; } szClient[lenClient] = '\0'; } /* "view" */ psz = (uchar*) strstr((char*) getMSG(pMsg), "view "); if(psz == NULL) { dbgprintf("Custom_BindCDR: view part in msg missing\n"); FINALIZE; } else { psz += sizeof("view ") - 1; /* skip "label" */ for( lenView = 0 ; *psz && *psz != ':' && lenView < sizeof(szView) - 1 ; ++lenView) { szView[lenView] = *psz++; } szView[lenView] = '\0'; } /* "query" - we must extract just the number, and in reverse! */ psz = (uchar*) strstr((char*) getMSG(pMsg), "query: "); if(psz == NULL) { dbgprintf("Custom_BindCDR: query part in msg missing\n"); FINALIZE; } else { psz += sizeof("query: ") - 1; /* skip "label" */ /* first find end-of-string to process */ while(*psz && (isdigit(*psz) || *psz == '.')) { dbgprintf("XXXX: step 1: %c\n", *psz); psz++; } /* now shuffle data */ for( lenQuery = 0 ; *psz && *psz != ' ' && lenQuery < sizeof(szQuery) - 1 ; --psz) { if(isdigit(*psz)) szQuery[lenQuery++] = *psz; } szQuery[lenQuery] = '\0'; } /* "ip" */ psz = (uchar*) strstr((char*) getMSG(pMsg), "IN TXT + ("); if(psz == NULL) { dbgprintf("Custom_BindCDR: ip part in msg missing\n"); FINALIZE; } else { psz += sizeof("IN TXT + (") - 1; /* skip "label" */ for( lenIP = 0 ; *psz && *psz != ')' && lenIP < sizeof(szIP) - 1 ; ++lenIP) { szIP[lenIP] = *psz++; } szIP[lenIP] = '\0'; } /* --- strings extracted ---- */ /* calculate len, constants for spaces and similar fixed strings */ lenTotal = lenTimeStamp + lenClient + lenView + lenQuery + lenIP + 5 * 5 + sizeof(SQL_STMT) + sizeof(SQL_STMT_END) + 2; /* now make sure buffer is large enough */ if(lenTotal >= *pLenBuf) CHKiRet(ExtendBuf(ppBuf, pLenBuf, lenTotal)); /* and concatenate the resulting string */ memcpy(*ppBuf, SQL_STMT, sizeof(SQL_STMT) - 1); iBuf = sizeof(SQL_STMT) - 1; // SQL content:DATE,TIME,CLIENT,VIEW,QUERY,IP); memcpy(*ppBuf + iBuf, pTimeStamp, lenTimeStamp); iBuf += lenTimeStamp; ADD_SQL_DELIM memcpy(*ppBuf + iBuf, szClient, lenClient); iBuf += lenClient; ADD_SQL_DELIM memcpy(*ppBuf + iBuf, szView, lenView); iBuf += lenView; ADD_SQL_DELIM memcpy(*ppBuf + iBuf, szQuery, lenQuery); iBuf += lenQuery; ADD_SQL_DELIM memcpy(*ppBuf + iBuf, szIP, lenIP); iBuf += lenIP; ADD_SQL_DELIM /* end of SQL statement/trailer (NUL is contained in string!) */ memcpy(*ppBuf + iBuf, SQL_STMT_END, sizeof(SQL_STMT_END)); iBuf += sizeof(SQL_STMT_END); finalize_it: ENDstrgen BEGINmodExit CODESTARTmodExit ENDmodExit BEGINqueryEtryPt CODESTARTqueryEtryPt CODEqueryEtryPt_STD_SMOD_QUERIES ENDqueryEtryPt BEGINmodInit() CODESTARTmodInit *ipIFVersProvided = CURR_MOD_IF_VERSION; /* we only support the current interface specification */ CODEmodInit_QueryRegCFSLineHdlr dbgprintf("rsyslog sm_cust_bindcdr called, compiled with version %s\n", VERSION); ENDmodInit