diff options
| -rw-r--r-- | src/objectscanner_analyze.cpp | 7 | ||||
| -rw-r--r-- | src/objectscanner_kafka.h | 1 |
2 files changed, 5 insertions, 3 deletions
diff --git a/src/objectscanner_analyze.cpp b/src/objectscanner_analyze.cpp index 71eae5a..a61fb4f 100644 --- a/src/objectscanner_analyze.cpp +++ b/src/objectscanner_analyze.cpp @@ -126,7 +126,7 @@ static long func_long_get_rslt_callback(P_OBJ_PROVIDER p_op, void *p_data, void cJSON_AddStringToObject(message->meta_json, "malware_type", malware_type); cJSON_AddStringToObject(message->meta_json, "malware_name", malware_name); message->hitted = 1; - MESA_HANDLE_RUNTIME_LOGV2(g_objscan_info.log_runtime, RLOG_LV_INFO, "AVL_SDK_Scan %s hit, type: %s, name: %s", message->object_uri, malware_type, malware_name); + MESA_HANDLE_RUNTIME_LOGV2(g_objscan_info.log_runtime, RLOG_LV_INFO, "AVL_SDK_Scan %lu:%s malware hit: %s/%s", message->object_size, message->object_uri, malware_type, malware_name); atomic_inc(&g_objscan_info.statistic.num[MESSAGE_HITTED]); return long_qry_ret; } @@ -151,7 +151,7 @@ static int32_t scan_object_by_avl_engine(message_meta_item_t *message) long_last_ret = AVL_SDK_Scan(g_objscan_info.p_engine_handle, &op, &od); if (long_last_ret < 0) { - MESA_HANDLE_RUNTIME_LOGV2(g_objscan_info.log_runtime, RLOG_LV_DEBUG, "AVL_SDK_Scan %s error: %ld", message->object_uri, long_last_ret); + MESA_HANDLE_RUNTIME_LOGV2(g_objscan_info.log_runtime, RLOG_LV_DEBUG, "AVL_SDK_Scan %lu:%s error: %ld", message->object_size, message->object_uri, long_last_ret); return -1; } return message->hitted; @@ -195,7 +195,7 @@ void* thread_analyze_object(void *arg) } else { - MESA_HANDLE_RUNTIME_LOGV2(g_objscan_info.log_runtime, RLOG_LV_DEBUG, "AVL_SDK_Scan %s innoxious.", message->object_uri); + MESA_HANDLE_RUNTIME_LOGV2(g_objscan_info.log_runtime, RLOG_LV_DEBUG, "AVL_SDK_Scan %lu:%s innoxious.", message->object_size, message->object_uri); atomic_inc(&g_objscan_info.statistic.num[MESSAGE_SUCC]); } destroy_parsed_message(message); @@ -222,6 +222,7 @@ void get_future_success(future_result_t* result, void * user) case RESULT_TYPE_HEADER: if(message->content == NULL) { + message->object_size = res->tlength; message->max_len = (res->tlength>=g_objscan_info.anly_max_len)?g_objscan_info.anly_max_len:res->tlength; message->content = (char *)malloc(message->max_len); } diff --git a/src/objectscanner_kafka.h b/src/objectscanner_kafka.h index 0e5c9e8..14a43dc 100644 --- a/src/objectscanner_kafka.h +++ b/src/objectscanner_kafka.h @@ -33,6 +33,7 @@ typedef struct __message_meta_item char *content; size_t current_len; size_t max_len; + size_t object_size; int32_t hitted; }message_meta_item_t; |