|
|
|
@ -117,22 +117,19 @@ static OutputInitResult OutputRdpLogInitSub(ConfNode *conf,
|
|
|
|
return result;
|
|
|
|
return result;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#define OUTPUT_BUFFER_SIZE 65535
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
static TmEcode JsonRdpLogThreadInit(ThreadVars *t, const void *initdata, void **data)
|
|
|
|
static TmEcode JsonRdpLogThreadInit(ThreadVars *t, const void *initdata, void **data)
|
|
|
|
{
|
|
|
|
{
|
|
|
|
LogRdpLogThread *thread = SCCalloc(1, sizeof(*thread));
|
|
|
|
if (initdata == NULL) {
|
|
|
|
if (unlikely(thread == NULL)) {
|
|
|
|
SCLogDebug("Error getting context for EveLogRdp. \"initdata\" is NULL.");
|
|
|
|
return TM_ECODE_FAILED;
|
|
|
|
return TM_ECODE_FAILED;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
if (initdata == NULL) {
|
|
|
|
LogRdpLogThread *thread = SCCalloc(1, sizeof(*thread));
|
|
|
|
SCLogDebug("Error getting context for EveLogRdp. \"initdata\" is NULL.");
|
|
|
|
if (unlikely(thread == NULL)) {
|
|
|
|
SCFree(thread);
|
|
|
|
|
|
|
|
return TM_ECODE_FAILED;
|
|
|
|
return TM_ECODE_FAILED;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
thread->buffer = MemBufferCreateNew(OUTPUT_BUFFER_SIZE);
|
|
|
|
thread->buffer = MemBufferCreateNew(JSON_OUTPUT_BUFFER_SIZE);
|
|
|
|
if (unlikely(thread->buffer == NULL)) {
|
|
|
|
if (unlikely(thread->buffer == NULL)) {
|
|
|
|
SCFree(thread);
|
|
|
|
SCFree(thread);
|
|
|
|
return TM_ECODE_FAILED;
|
|
|
|
return TM_ECODE_FAILED;
|
|
|
|
|