u-siem 0.7.0

A framework for building custom SIEMs
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68

/// Common HTTP Request methods
use serde::{Deserialize, Serialize};

#[derive(Serialize, Deserialize, Debug, PartialEq, Clone)]
pub enum HttpMethod {
    UNKNOWN(String),
    GET,
    POST,
    PUT,
    PATCH,
    OPTIONS,
    CONNECT,
    HEAD,
    UNDEFINED,
}

#[derive(Serialize, Deserialize, Debug, PartialEq, Clone)]
pub enum WebProtocol {
    UNKNOWN(String),
    HTTP,
    HTTPS,
    FTP,
    WS,
    WSS,
}
impl std::fmt::Display for WebProtocol {
    fn fmt(&self, f: &mut std::fmt::Formatter) -> std::fmt::Result {
        write!(f, "{:?}", self)
        // or, alternatively:
        // fmt::Debug::fmt(self, f)
    }
}
impl HttpMethod {
    pub fn from_str_slice(val: &str) -> HttpMethod {
        match &val.to_uppercase()[..] {
            "GET" => HttpMethod::GET,
            "POST" => HttpMethod::POST,
            "PATCH" => HttpMethod::PATCH,
            "OPTIONS" => HttpMethod::OPTIONS,
            "CONNECT" => HttpMethod::CONNECT,
            "HEAD" => HttpMethod::HEAD,
            "UNDEFINED" => HttpMethod::UNDEFINED,
            val => HttpMethod::UNKNOWN(val.to_string()),
        }
    }

    pub fn equals(&self, val: &str) -> bool {
        matches!(
            (val, self),
            ("GET", HttpMethod::GET)
                | ("POST", HttpMethod::POST)
                | ("PUT", HttpMethod::PUT)
                | ("PATCH", HttpMethod::PATCH)
                | ("UNKNOWN", HttpMethod::UNKNOWN(_))
                | ("OPTIONS", HttpMethod::OPTIONS)
                | ("CONNECT", HttpMethod::CONNECT)
                | ("HEAD", HttpMethod::HEAD)
                | ("UNDEFINED", HttpMethod::UNDEFINED)
        )
    }
}
impl std::fmt::Display for HttpMethod {
    fn fmt(&self, f: &mut std::fmt::Formatter) -> std::fmt::Result {
        write!(f, "{:?}", self)
        // or, alternatively:
        // fmt::Debug::fmt(self, f)
    }
}