1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
// Copyright (c) Authors of Clover
//
// All rights reserved. This program and the accompanying materials
// are made available under the terms of the Apache License, Version 2.0
// which accompanies this distribution, and is available at
// http://www.apache.org/licenses/LICENSE-2.0
package cmd
import (
"fmt"
"os"
"io/ioutil"
"gopkg.in/resty.v1"
"github.com/ghodss/yaml"
"github.com/spf13/cobra"
)
var idsrulesCmd = &cobra.Command{
Use: "idsrules",
Short: "Create one or many snort IDS rules from yaml file",
Long: ``,
Run: func(cmd *cobra.Command, args []string) {
createIDSRules()
},
}
func init() {
createCmd.AddCommand(idsrulesCmd)
idsrulesCmd.Flags().StringVarP(&cloverFile, "file", "f", "",
"Input yaml file to add IDS rules")
idsrulesCmd.MarkFlagRequired("file")
}
func createIDSRules() {
checkControllerIP()
url := controllerIP + "/snort/addrule"
in, err := ioutil.ReadFile(cloverFile)
if err != nil {
fmt.Println("Please specify a valid rule definition yaml file")
os.Exit(1)
}
out_json, err := yaml.YAMLToJSON(in)
if err != nil {
fmt.Printf("Invalid yaml: %v\n", err)
os.Exit(1)
}
resp, err := resty.R().
SetHeader("Content-Type", "application/json").
SetBody(out_json).
Post(url)
if err != nil {
fmt.Printf("Cannot connect to controller: %v\n", err)
os.Exit(1)
}
fmt.Printf("\n%v\n", resp)
}
|
