1 /* $Id: ssp_pix.h,v 2.5 2008/04/26 19:53:21 fknobbe Exp $
2  *
3  *
4  * Copyright (c) 2002-2008 Frank Knobbe <frank@knobbe.us>
5  * All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice, this list of conditions and the following disclaimer.
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in the
14  *    documentation and/or other materials provided with the distribution.
15  *
16  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
17  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
20  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26  * SUCH DAMAGE.
27  *
28  * Acknowledgements:
29  *
30  * Thanks to Aaron Carr for letting me use his PIX and making test machines
31  * accessible.
32  *
33  *
34  *
35  * ssp_pix.h
36  *
37  * Purpose:
38  *
39  * This SnortSam plugin telnet's into one or more Cisco PIX firewalls,
40  * and issues the shun command. SnortSam will also expire the blocks
41  * itself since the PIX does not have automatic time-out functionality.
42  *
43  *
44  */
45 
46 
47 #ifndef		__SSP_PIX_H__
48 #define		__SSP_PIX_H__
49 
50 
51 #define PIXPWLEN		50			/* Maximum password length */
52 #define PIXNETWAIT		20			/* Network timeout in sec */
53 
54 
55 typedef struct _pixdata				/* List of PIX firewalls */
56 {	struct 			in_addr	ip;
57 	SOCKET 			pixsocket;
58 	int				userlogin;
59 	int 			loggedin;
60 	char			*telnetpw;
61 	char			username[(PIXPWLEN+1)*2];
62 	char			enablepw[PIXPWLEN+1];
63 }	PIXDATA;
64 
65 
66 void PIXParse(char *,char *,unsigned long,DATALIST *);
67 void PIXBlock(BLOCKINFO *,void *,unsigned long);
68 
69 #endif /* __SSP_PIX_H__ */
70 
71