| line |
true |
false |
branch |
|
135
|
0 |
0 |
if (not defined $opts{'max_lines'}) { } |
|
|
0 |
0 |
elsif (ref $opts{'max_lines'} ne '') { } |
|
|
0 |
0 |
elsif (not &looks_like_number($opts{'max_lines'})) { } |
|
|
0 |
0 |
elsif ($opts{'max_lines'} < 1) { } |
|
145
|
0 |
0 |
if (not defined $opts{'read_back_time'}) { } |
|
|
0 |
0 |
elsif (ref $opts{'read_back_time'} ne '') { } |
|
|
0 |
0 |
elsif (not &looks_like_number($opts{'read_back_time'})) { } |
|
|
0 |
0 |
elsif ($opts{'read_back_time'} < 1) { } |
|
155
|
0 |
0 |
if (not defined $opts{'warn_count'}) { } |
|
|
0 |
0 |
elsif (ref $opts{'warn_count'} ne '') { } |
|
|
0 |
0 |
elsif (not &looks_like_number($opts{'warn_count'})) { } |
|
163
|
0 |
0 |
if (not defined $opts{'alert_count'}) { } |
|
|
0 |
0 |
elsif (ref $opts{'alert_count'} ne '') { } |
|
|
0 |
0 |
elsif (not &looks_like_number($opts{'alert_count'})) { } |
|
171
|
0 |
0 |
if (not defined $opts{'flow_file'}) { } |
|
|
0 |
0 |
elsif (ref $opts{'flow_file'} ne '') { } |
|
177
|
0 |
0 |
if (not defined $opts{'sensor_names'}) { } |
|
|
0 |
0 |
elsif (ref $opts{'sensor_names'} ne 'ARRAY') { } |
|
184
|
0 |
0 |
if (ref $opts{'sensor_names'}[$sensor_names_int] ne "") |
|
197
|
0 |
0 |
if (defined $opts{'ignore_IPs'}) |
|
198
|
0 |
0 |
if (ref $opts{'ignore_IPs'} ne "ARRAY") |
|
204
|
0 |
0 |
if (ref $opts{'ignore_IPs'}[$ignore_IPs_int] ne "") |
|
212
|
0 |
0 |
unless ($opts{'ignore_IPs'}[$ignore_IPs_int] =~ /^$Check::SuricataFlows::IPv6_re$/ or $opts{'ignore_IPs'}[$ignore_IPs_int] =~ /^$Check::SuricataFlows::IPv4_re$/) |
|
224
|
0 |
0 |
if ($@) |
|
319
|
0 |
0 |
if (not -e $self->{'flow_file'}) { } |
|
|
0 |
0 |
elsif (not -r $self->{'flow_file'}) { } |
|
336
|
0 |
0 |
unless $bw = "File::ReadBackwards"->new($self->{'flow_file'}) |
|
337
|
0 |
0 |
if ($@) |
|
350
|
0 |
0 |
if ($line_count > $self->{'max_lines'}) { } |
|
|
0 |
0 |
elsif ($bw->eof) { } |
|
356
|
0 |
0 |
if ($process) |
|
370
|
0 |
0 |
if ($@) { } |
|
|
0 |
0 |
elsif ($process_line) { } |
|
376
|
0 |
0 |
if (defined $parsed_line->{'timestamp'}) |
|
381
|
0 |
0 |
if (defined $time and $time >= $read_till) { } |
|
|
0 |
0 |
elsif (defined $time and $time < $read_till) { } |
|
388
|
0 |
0 |
if ($time_good and defined $parsed_line->{'dest_ip'} and ref $parsed_line->{'dest_ip'} eq "" and defined $parsed_line->{'src_ip'} and ref $parsed_line->{'src_ip'} eq "" and defined $parsed_line->{'flow'} and ref $parsed_line->{'flow'} eq "HASH" and defined $parsed_line->{'flow'}{'pkts_toclient'} and ref $parsed_line->{'flow'}{'pkts_toclient'} eq "" and &looks_like_number($parsed_line->{'flow'}{'pkts_toclient'}) and defined $parsed_line->{'flow'}{'pkts_toserver'} and ref $parsed_line->{'flow'}{'pkts_toserver'} eq "" and &looks_like_number($parsed_line->{'flow'}{'pkts_toserver'})) |
|
406
|
0 |
0 |
if ($self->{'ignore_IPs_lookup'}{$src_ip->addr}) |
|
409
|
0 |
0 |
unless ($IP_ignore) |
|
411
|
0 |
0 |
if ($self->{'ignore_IPs_lookup'}{$dest_ip->addr}) |
|
416
|
0 |
0 |
if ($@) |
|
421
|
0 |
0 |
if (not $IP_ignore) { } |
|
423
|
0 |
0 |
unless (defined $to_return->{'by_sensor'}{$sensor}) |
|
429
|
0 |
0 |
if ($parsed_line->{'flow'}{'pkts_toserver'} > 0 and $parsed_line->{'flow'}{'pkts_toclient'} > 0) { } |
|
446
|
0 |
0 |
if ($to_return->{'bi_directional_count'} <= $self->{'alert_count'}) { } |
|
|
0 |
0 |
elsif ($to_return->{'bi_directional_count'} <= $self->{'warn_count'}) { } |
|
464
|
0 |
0 |
if (defined $self->{'sensor_names'}[0]) |
|
466
|
0 |
0 |
if (defined $to_return->{'by_sensor'}{$sensor}) { } |
|
467
|
0 |
0 |
if ($to_return->{'by_sensor'}{$sensor}{'bi_directional_count'} <= $self->{'alert_count'}) { } |
|
|
0 |
0 |
elsif ($to_return->{'by_sensor'}{$sensor}{'bi_directional_count'} <= $self->{'warn_count'}) { } |
|
486
|
0 |
0 |
if ($to_return->{'status_code'} < 1) |
|
505
|
0 |
0 |
if (defined $to_return->{'by_sensor'}{$sensor}) { } |