Security/Mentorships/MWoS/2014/Linux Audit heka plugin (Go): Difference between revisions

Security/Mentorships/MWoS/2014/Linux Audit heka plugin (Go) (view source)

907 bytes added , 9 September 2014

no edit summary

5

edits

@@ Line 76: / Line 76: @@
 ** Use sudo -s and then strace -f go run <filename>
 * Study strace and ltrace documentation
+=== 2014-09-08 ===
+[https://etherpad.mozilla.org/YnR9hhqutn (Etherpad Index)]
+[https://github.com/AALEKH/Audit-Go/ Project Code]
+Current Work:
+* Invalid Argument error removed :D, yay .
+* Strace'd of auditd and netlink retrieved.
+* Recieving nil as an output to audit message.
+Discussion Point:
+* Cause of nil error
+* Way to parse audit message.
+* Data type of audit message
+Upcoming Work:
+* Change the status code of proto, currently assigned 1000 status code is not correct.
+* Output form of netlink message is structure.
+* Use structure format same as audit_reply present in here [https://fedorahosted.org/audit/browser/trunk/lib/libaudit.h libaudit.h]
+* Make a parse function like audit_get_reply as present in [https://fedorahosted.org/audit/browser/trunk/lib/libaudit.h libaudit.h]
+* Study audit documentation and [https://fedorahosted.org/audit/browser/trunk/lib/libaudit.h libaudit.h] code
 === <date> ===