com.martealert
Class martealertSecondLevel

java.lang.Object
  com.martealert.martealertTable
      com.martealert.martealertFirstLevel
          com.martealert.martealertSecondLevel

All Implemented Interfaces:

martealertConstants, martealertLevelInterface, martealertRealTimeInterface

Direct Known Subclasses:

martealertThirdLevel

public class martealertSecondLevel

extends martealertFirstLevel

Field Summary

Fields inherited from class com.martealert.martealertFirstLevel

max

Fields inherited from class com.martealert.martealertTable

_, ALIASVAR, columnNames, data, DEFAULT, GROUPBY, IDENT, INDEX, INDEXSEARCH, NAMEDVAR, RELATION, SELECT, TX, UNNAMEDVAR, VAR

Fields inherited from interface com.martealert.martealertConstants

AMBIGUOUS_FIELDS, ANALYZER, CLASSIFICATION, COMPLETION, FTS, FTSTZ, HOUR_IN_MILLIS, INTERVAL, IPADDRS, LASTJOIN, LTS, LTSTZ, MAXMSGID, MAXSEVERITY, MFTS, MLTS, MSGID, MSOURCEPORT, NALERTS, NOTNULL_FIELDS, NULL_FIELDS, NXCLASSIFICATION, ORDER_BY_ALERTS, ORDER_BY_MAXTIME, ORDER_BY_TIME, PRELUDE_TABLES, PROTOCOL, SENSOR, SEVERITY, SEVERITY_COMPLETION, SOURCE, SOURCEIP, SOURCEPORT, SOURCEUID, TARGET, TARGETIP, TARGETPORT, TARGETPORT_PROTOCOL, TARGETUID, TERMINAL, TIME, TIMETZ, TLAST, TOP, TOTALTIME

Fields inherited from interface com.martealert.martealertLevelInterface

FIRST_CLASSIFICATION, FIRST_FTS, FIRST_LTS, FIRST_MAX_LIMIT, FIRST_SENSOR, FIRST_SEVERITY, FIRST_SOURCE_ADDR, FIRST_TARGET_ADDR, FIRST_TERMINAL, SECOND_CLASSIFICATION, SECOND_COMPLETION, SECOND_FTS, SECOND_LTS, SECOND_MAX_LIMIT, SECOND_PROTOCOL, SECOND_SENSOR, SECOND_SEVERITY, SECOND_SOURCE_ADDR, SECOND_SOURCEPORT, SECOND_TARGET_ADDR, SECOND_TARGETPORT, SECOND_TERMINAL, THIRD_CLASSIFICATION, THIRD_COMPLETION, THIRD_MESSAGEID, THIRD_PROTOCOL, THIRD_SENSOR, THIRD_SEVERITY, THIRD_SOURCE_ADDR, THIRD_SOURCEPORT, THIRD_TARGET_ADDR, THIRD_TARGETPORT, THIRD_TERMINAL, THIRD_TIME

Fields inherited from interface com.martealert.martealertRealTimeInterface

REAL_TIME_CLASSIFICATION, REAL_TIME_COMPLETION, REAL_TIME_MSGID, REAL_TIME_SEVERITY, REAL_TIME_SOURCEIP, REAL_TIME_TARGETIP, REAL_TIME_TIME

Constructor Summary

	martealertSecondLevel() Creates a new instance of martealertSecondLevel
protected	martealertSecondLevel(char separator)

Method Summary

protected java.lang.String	getFTS(martealertTable pt)
protected int	getFTSColumn() Get number of FTS column.
int[]	getIgnoredColumnsPdf() Get column numbers of a martealertTable to be ignored for generating pdf report.
int[]	getIpColumns() Get IP-columns numbers in an array of int.
protected java.lang.String	getLTS(martealertTable pt)
protected int	getLTSColumn() Get number of LTS column.
int[]	getMultilineColumns() Get array with number of columns which rows can store multiline values (sub-rows).
int[]	getPortColumns() Get port columns numbers in an array of int.
int[]	getProtocolColumns() Get array with number of protocol columns, to be solved from protocol table in database.
int	getSeverityColumn() Get column number which has maximum severity for each martealertFirstLevel row.
protected java.lang.String	getSqlAuxGroupBy()
protected java.lang.String	getSqlAuxVars()
protected java.lang.String	getSqlGroupBy()
protected java.lang.String	getSqlOrderBy()
protected java.lang.String	getSqlVars() Return a string with all variables needed for martealertFirstLevel, separated with comas except the last one
void	reload(java.sql.Connection con, martealertFirstLevel jpfst, int[] nrow, martealertHashFilter filter)
protected java.util.Vector	vfields() Compose a vector with components for joins between tables.

Methods inherited from class com.martealert.martealertFirstLevel

clear, getClassification, getFirstLevelRow, getIP, getIpAddress, getIpAddress, getNextPairAddress, getPairAddressTable, getPort, getProbe, getProtocol, getRowInfoTable, getSensorInfo, getSourceInfo, getSqlLimit, getSqlWhere, getTargetInfo, initFirstLevel, main, numberOcurrences, reload, reload, reload, setColumnNames

Methods inherited from class com.martealert.martealertTable

getColumn, getColumnNames, getColumnSize, getData, getPercentColumns, getRow, getRowSize, getSqlRelation, getTableVector, getValue, getValue, getValue, printTable, setColumnNames, setDataVector, setDataVector, setValue

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

martealertSecondLevel

public martealertSecondLevel()

Creates a new instance of martealertSecondLevel

martealertSecondLevel

protected martealertSecondLevel(char separator)

Parameters:

separator -

Method Detail

vfields

protected java.util.Vector vfields()

Description copied from class: martealertFirstLevel

Compose a vector with components for joins between tables. DEPRECATED for versions < ale-sql-0.7.1

Overrides:

vfields in class martealertFirstLevel

Returns:

Vector with fields for composing sql commands.

reload

public void reload(java.sql.Connection con,
                   martealertFirstLevel jpfst,
                   int[] nrow,
                   martealertHashFilter filter)
            throws java.sql.SQLException

Parameters:

con -

jpfst -

nrow -

Throws:

java.sql.SQLException

getSqlVars

protected java.lang.String getSqlVars()

Return a string with all variables needed for martealertFirstLevel, separated with comas except the last one

Overrides:

getSqlVars in class martealertFirstLevel

Returns:

String with vars taken from martealertHashtables initialized in martealertTable class.

getSqlAuxVars

protected java.lang.String getSqlAuxVars()

Overrides:

getSqlAuxVars in class martealertFirstLevel

getSqlAuxGroupBy

protected java.lang.String getSqlAuxGroupBy()

Overrides:

getSqlAuxGroupBy in class martealertFirstLevel

Returns:

String with variable positions...

getSqlGroupBy

protected java.lang.String getSqlGroupBy()

Overrides:

getSqlGroupBy in class martealertFirstLevel

getSqlOrderBy

protected java.lang.String getSqlOrderBy()

Overrides:

getSqlOrderBy in class martealertFirstLevel

getFTS

protected java.lang.String getFTS(martealertTable pt)

getLTS

protected java.lang.String getLTS(martealertTable pt)

getIpColumns

public int[] getIpColumns()

Get IP-columns numbers in an array of int.

Overrides:

getIpColumns in class martealertFirstLevel

Returns:

Array of int with column number to be ip-resolved.

getMultilineColumns

public int[] getMultilineColumns()

Description copied from class: martealertFirstLevel

Get array with number of columns which rows can store multiline values (sub-rows). It's quite useful for front-end to represent correctly martealertFirstLevel.

Overrides:

getMultilineColumns in class martealertFirstLevel

Returns:

Number of columns with multiline columns or null if any is found.

getSeverityColumn

public int getSeverityColumn()

Description copied from class: martealertFirstLevel

Get column number which has maximum severity for each martealertFirstLevel row.

Overrides:

getSeverityColumn in class martealertFirstLevel

Returns:

integer with severity column number.

getProtocolColumns

public int[] getProtocolColumns()

Description copied from class: martealertTable

Get array with number of protocol columns, to be solved from protocol table in database.

Overrides:

getProtocolColumns in class martealertTable

Returns:

Number of columns which store a protocol or null if any is found.

getIgnoredColumnsPdf

public int[] getIgnoredColumnsPdf()

Get column numbers of a martealertTable to be ignored for generating pdf report.

Overrides:

getIgnoredColumnsPdf in class martealertFirstLevel

Returns:

int array with column numbers that won't appear in pdf report.

getPortColumns

public int[] getPortColumns()

Get port columns numbers in an array of int.

Overrides:

getPortColumns in class martealertTable

Returns:

Array of int with column number to be port (and therefore service) resolved.

getFTSColumn

protected int getFTSColumn()

Description copied from class: martealertFirstLevel

Get number of FTS column.

Overrides:

getFTSColumn in class martealertFirstLevel

Returns:

Get number of FTS column or -1 if it isn't found.

getLTSColumn

protected int getLTSColumn()

Description copied from class: martealertFirstLevel

Get number of LTS column.

Overrides:

getLTSColumn in class martealertFirstLevel

Returns:

Get number of LTS column or -1 if it isn't found.