# Copyright (c) 2010 Flowerfire, Inc. All Rights Reserved. message_sniffer = { plugin_version = "1.0.1" # Initial creation - 1.0 # 2011-06-22 - 1.0.1 - MSG - Edited info lines. info.1.manufacturer = "Arm Research Labs" info.1.device = "Message Sniffer" info.1.version.1 = "" # The name of the log format log.format.format_label = "Message Sniffer Log Format" log.miscellaneous.log_data_type = "mail_server" log.miscellaneous.log_format_type = "internet_device" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^[a-z0-9]+ [0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9] [^ ]+ [0-9]+ [0-9]+ [A-Z][a-z]+ [0-9]+ [0-9]+ [0-9]+ [0-9]+ [0-9]+$" # Regular expression used to parse format log.format.parsing_regular_expression = "^([a-z0-9]+) ([0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9])([0-9][0-9][0-9][0-9][0-9][0-9]) ([^ ]+) ([0-9]+) ([0-9]+) ([A-Z][a-z]+) ([0-9]+) ([0-9]+) ([0-9]+) ([0-9]+) ([0-9]+)$" # The format of dates and times in this log log.format.date_format = "yyyymmdd" log.format.time_format = "hhmmss" # Entries are called messages statistics.miscellaneous.entry_name = "messages" # Log fields log.fields = { license = { label = "$lang_stats.field_labels.license" type = "flat" index = 0 subindex = 0 } # license date = { label = "$lang_stats.field_labels.date" type = "date" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # date time = { label = "$lang_stats.field_labels.time" type = "time" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # time scanned_message_file = { label = "$lang_stats.field_labels.scanned_message_file" type = "flat" index = 0 subindex = 0 } # scanned_message_file setup_time = { label = "$lang_stats.field_labels.setup_time" type = "flat" index = 0 subindex = 0 } # setup_time scan_time = { label = "$lang_stats.field_labels.scan_time" type = "flat" index = 0 subindex = 0 } # scan_time result = { label = "$lang_stats.field_labels.result" type = "flat" index = 0 subindex = 0 } # result matching_rule = { label = "$lang_stats.field_labels.matching_rule" type = "flat" index = 0 subindex = 0 } # matching_rule group = { label = "$lang_stats.field_labels.group" type = "flat" index = 0 subindex = 0 } # group start_position = { label = "$lang_stats.field_labels.start_position" type = "flat" index = 0 subindex = 0 } # start_position end_position = { label = "$lang_stats.field_labels.end_position" type = "flat" index = 0 subindex = 0 } # end_position depth = { label = "$lang_stats.field_labels.depth" type = "flat" index = 0 subindex = 0 } # depth } # log.fields # Database fields database.fields = { date_time = { label = "$lang_stats.field_labels.date_time" log_field = "date_time" type = "string" suppress_top = 0 suppress_bottom = 3 display_format_type = "date_time" } # date_time day_of_week = { label = "$lang_stats.field_labels.day_of_week" log_field = "day_of_week" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "day_of_week" } # day_of_week hour_of_day = { label = "$lang_stats.field_labels.hour_of_day" log_field = "hour_of_day" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "hour_of_day" } # hour_of_day license = { label = "$lang_stats.field_labels.license" log_field = "license" type = "string" suppress_top = 0 suppress_bottom = 2 } # license scanned_message_file = { label = "$lang_stats.field_labels.scanned_message_file" log_field = "scanned_message_file" type = "string" suppress_top = 0 suppress_bottom = 2 } # scanned_message_file setup_time = { label = "$lang_stats.field_labels.setup_time" log_field = "setup_time" type = "string" suppress_top = 0 suppress_bottom = 2 } # setup_time scan_time = { label = "$lang_stats.field_labels.scan_time" log_field = "scan_time" type = "string" suppress_top = 0 suppress_bottom = 2 } # scan_time result = { label = "$lang_stats.field_labels.result" log_field = "result" type = "string" suppress_top = 0 suppress_bottom = 2 } # result matching_rule = { label = "$lang_stats.field_labels.matching_rule" log_field = "matching_rule" type = "string" suppress_top = 0 suppress_bottom = 2 } # matching_rule group = { label = "$lang_stats.field_labels.group" log_field = "group" type = "string" suppress_top = 0 suppress_bottom = 2 } # group start_position = { label = "$lang_stats.field_labels.start_position" log_field = "start_position" type = "string" suppress_top = 0 suppress_bottom = 2 } # start_position end_position = { label = "$lang_stats.field_labels.end_position" log_field = "end_position" type = "string" suppress_top = 0 suppress_bottom = 2 } # end_position depth = { label = "$lang_stats.field_labels.depth" log_field = "depth" type = "string" suppress_top = 0 suppress_bottom = 2 } # depth } # database.fields database.numerical_fields = { messages = { label = "$lang_stats.field_labels.messages" default = true requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # messages } # database.numerical_fields log.filters = { mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'messages = 1;' } # mark_entry } # log.filters create_profile_wizard_options = { date_time_tracking = true # How the reports should be grouped in the report menu report_groups = { date_time_group = "" license = true scanned_message_file = true setup_time = true scan_time = true result = true matching_rule = true group = true start_position = true end_position = true depth = true } # report_groups } # create_profile_wizard_options not_supported = { visitors = true sessions = true pageviews = true bandwidth = true individualhosts = true } # not_supported } # message_sniffer