PREPARE/tracing/modules/fields.js

/**
 * TraCINg-Server - Gathering and visualizing cyber incidents on the world
 *
 * Copyright 2013 Matthias Gazzari, Annemarie Mattmann, André Wolski
 * 
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 
 *     http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

// default is for all fields: 0
var fields = {
    "type": {
        0: "Unknown",
	    1: "ECHO",
	    2: "GHOST",
        10: "Transport Layer",
        11: "Portscan",
        20: "Shellcode Injection",
        30: "SQL",
        31: "MySQL",
        32: "MS SQL",
        40: "SMB",
        50: "VoIP",
	    60: "FTP",
	    70: "HTTP",
	    71: "HTTPS",
	    80: "TELNET"
    },
    "type_description": {
        0: "The sensor could not determine the attack type",
	    1: "Attack on ECHO",
	    2: "Attack that was mirrored (GHOST)",
        10: "The attacker connected to an open port, but did not interact with it",
        11: "The attacker tried to connect to a closed port",
        20: "The attacker successfully used an emulated security issue and would have been able to execute malicious code",
        30: "Attack on a database server",
        31: "Attack on a MySQL database server",
        32: "Attack on a Microsoft database server",
        40: "Attack on a SMB file server",
        50: "Attack on a Voice over IP device",
	    60: "Attack on an FTP Server",
	    70: "Attack on an HTTP Server",
	    71: "Attack on an HTTPS Server",
	    80: "Attack on an TELNET"
    }
};

exports.fields = fields;

exports.translate = function(serieField, currentSerie) {
    if(fields[serieField].hasOwnProperty(currentSerie))
        return fields[serieField][currentSerie];
    else
        return fields[serieField][0];
};

function getKeys(obj) {
	var keys = [];

	for(var key in obj) {
		keys.push(key);
	}

	return keys;
}

exports.validTypes = getKeys(fields.type);