Index: /sample/hadoop-0.16/tw/org/nchc/code/SnortBase.java
===================================================================
--- /sample/hadoop-0.16/tw/org/nchc/code/SnortBase.java	(revision 32)
+++ /sample/hadoop-0.16/tw/org/nchc/code/SnortBase.java	(revision 33)
@@ -206,5 +206,5 @@
 
 	public static void main(String[] args) throws IOException {
-		String table_name = "apache-log2";
+		String table_name = "snort";
 		String dir = "/user/waue/apache-log";
 		
Index: /sample/hadoop-0.16/tw/org/nchc/code/SnortParser.java
===================================================================
--- /sample/hadoop-0.16/tw/org/nchc/code/SnortParser.java	(revision 32)
+++ /sample/hadoop-0.16/tw/org/nchc/code/SnortParser.java	(revision 33)
@@ -15,44 +15,29 @@
 import java.io.IOException;
 import java.text.ParseException;
-import java.util.StringTokenizer;
 import java.util.regex.Matcher;
 import java.util.regex.Pattern;
 
 public class SnortParser {
-	private String logData = new String(); 
-	private BufferedReader fi ;
-	private BufferedWriter fw ;
-	public SnortParser(String in, String ou) throws IOException {
-		fi = new BufferedReader(new FileReader(new File(in)));
-		fw = new BufferedWriter(new FileWriter(new File(ou)));
+	private String logData = new String();
+
+	private String in;
+
+	private String ou;
+
+	public SnortParser(String in, String ou) {
+		this.in = in;
+		this.ou = ou;
 	}
 
-	public static boolean isIpAddress(String inputString) {
-		StringTokenizer tokenizer = new StringTokenizer(inputString, ".");
-		if (tokenizer.countTokens() != 4) {
-			return false;
-		}
-		try {
-			for (int i = 0; i < 4; i++) {
-				String t = tokenizer.nextToken();
-				int chunk = Integer.parseInt(t);
-				if ((chunk & 255) != chunk) {
-					return false;
-				}
-			}
-		} catch (NumberFormatException e) {
-			return false;
-		}
-		if (inputString.indexOf("..") >= 0) {
-			return false;
-		}
-		return true;
+	public SnortParser() {
+		this.in = "/var/log/snort/alert";
+		this.ou = "~/parseSnort.log";
 	}
 
 	public void snortParser(String line, int i) throws ParseException,
 			Exception {
-		String[] data ;
+		String[] data;
 		Pattern patten_line;
-		Matcher matcher;		
+		Matcher matcher;
 		switch (i) {
 		case 1:
@@ -81,46 +66,46 @@
 			data = new String[number];
 			for (int j = 0; j < number; j++) {
-				data[j] = matcher.group(j+1);
-				this.logData += (data[j]+";");
+				data[j] = matcher.group(j + 1);
+				this.logData += (data[j] + ";");
 			}
-			
+
 		}
-		
+
 	}
-	void parseToLine() throws IOException,ParseException,Exception {
 
+	void parseToLine() throws IOException, ParseException, Exception {
+		BufferedReader fi = new BufferedReader(new FileReader(new File(in)));
+		BufferedWriter fw = new BufferedWriter(new FileWriter(new File(ou)));
 		String line = null;
 		int count = 0;
-
 		do {
-			String tmp = this.fi.readLine();
+			String tmp = fi.readLine();
 			if (tmp == null) {
 				break;
-			}else if(count < 4){
+			} else if (count < 4) {
 				line = tmp;
-//				System.out.println(line);
-				snortParser(line, count+1);
-				count ++;
-			}else if(count ==4 ){
-				count ++;
-			}else if (count == 5){
-				this.fw.write(this.logData.toString() + "\n");
-				this.logData = "" ;
+				// System.out.println(line);
+				snortParser(line, count + 1);
+				count++;
+			} else if (count == 4) {
+				count++;
+			} else if (count == 5) {
+				fw.write(this.logData.toString() + "\n");
+				this.logData = "";
 				count = 0;
-			}
-			else
-			{
+			} else {
 				System.err.print(" Error ! ");
-				return ;
+				return;
 			}
 		} while (true);
-		this.fw.flush();
-		this.fw.close();
+		fw.flush();
+		fw.close();
 
 	}
+
 	public static void main(String[] args) throws ParseException, Exception {
 		String in = new String("/home/waue/Desktop/alert");
 		String ou = new String("/home/waue/Desktop/bb");
-		SnortParser a = new SnortParser(in,ou);
+		SnortParser a = new SnortParser(in, ou);
 		a.parseToLine();
 	}
Index: /sample/hadoop-0.16/tw/org/nchc/code/SnortUploadHbase.java
===================================================================
--- /sample/hadoop-0.16/tw/org/nchc/code/SnortUploadHbase.java	(revision 33)
+++ /sample/hadoop-0.16/tw/org/nchc/code/SnortUploadHbase.java	(revision 33)
@@ -0,0 +1,174 @@
+/**
+ * Program: SnortUploadHbase.java
+ * Editor: Waue Chen 
+ * From :  NCHC. Taiwn
+ * Last Update Date: 07/02/2008
+ */
+
+/**
+ * Purpose : 
+ * 	First, program would parse your record and create Hbase.\
+ *  Then it sets the first line as column qualify \
+ * 	Finally it stores in HBase automatically.
+ * 
+ * HowToUse : 
+ * 	Make sure two thing :
+ * 	1. source_file must be regular as follow:
+ * 		first line: qualify1:qualify2:...:qualifyN
+ * 		other line: records1:records2:...:recordsN
+ *  2. source_file path must be correct.
+
+ * Check Result:
+ * 	Go to hbase console, type : 
+ * 		hql > select * from t1_table; 
+
+
+ */
+
+package tw.org.nchc.code;
+
+import java.io.File;
+import java.io.IOException;
+import java.util.Iterator;
+
+import org.apache.hadoop.fs.FileSystem;
+import org.apache.hadoop.fs.Path;
+import org.apache.hadoop.hbase.io.ImmutableBytesWritable;
+import org.apache.hadoop.hbase.mapred.TableReduce;
+import org.apache.hadoop.io.LongWritable;
+import org.apache.hadoop.io.MapWritable;
+import org.apache.hadoop.io.Text;
+import org.apache.hadoop.mapred.JobClient;
+import org.apache.hadoop.mapred.JobConf;
+import org.apache.hadoop.mapred.OutputCollector;
+import org.apache.hadoop.mapred.Reporter;
+import org.apache.hadoop.mapred.lib.IdentityMapper;
+import org.apache.hadoop.mapred.lib.IdentityReducer;
+
+public class SnortUploadHbase {
+	/* Major parameter */
+	// it indicates local path, not hadoop file system path
+	final static String source_file = "/var/log/snort/alert";
+
+	/* Minor parameter */
+	// column family name
+	final static String column_family = "snort:";
+
+	// table name
+	final static String table_name = "SnortTable";
+
+	// separate char
+	final static String sp = ";";
+	
+	// data source tmp
+	final static String text_tmp = "/tmp/HBaseRecord.text.tmp";
+
+	// on this sample, map is nonuse, we use reduce to handle
+	private static class ReduceClass extends TableReduce<LongWritable, Text> {
+		public void reduce(LongWritable key, Iterator<Text> values,
+				OutputCollector<Text, MapWritable> output, Reporter reporter)
+				throws IOException {
+
+			String first_line = "gid;sid;version;alert name;" +
+					"class;priority;year;month;day;hour;min;second;source;" +
+					"destination;type;ttl;tos;id; iplen;dgmlen";
+
+			// extract cf data
+			String[] cf = first_line.split(sp);
+			int length = cf.length;
+			 
+			// values.next().getByte() can get value and transfer to byte form,
+			String stro = new String(values.next().getBytes());
+			String str[] = stro.split(sp);
+
+			// Column id is created dymanically,
+			Text[] col_n = new Text[length];
+			byte[][] b_l = new byte[length][];
+			// contents must be ImmutableBytesWritable
+			ImmutableBytesWritable[] w_l = new ImmutableBytesWritable[length];
+
+			// This map connect to hbase table and holds the columns per row
+			MapWritable map = new MapWritable();
+			map.clear();
+
+			// prepare to write data into map
+			for (int i = 0; i < length; i++) {
+				col_n[i] = new Text(column_family + cf[i]);
+				b_l[i] = str[i].getBytes();
+				w_l[i] = new ImmutableBytesWritable(b_l[i]);
+				// populate the current row
+				map.put(col_n[i], w_l[i]);
+			}
+			// add the row with the key as the row id
+			output.collect(new Text(key.toString()), map);
+		}
+	}
+
+	public SnortUploadHbase() {
+	}
+	
+	// tmp file delete
+	boolean deleteFile(String str)throws IOException{
+		File df = new File(str);
+		
+		if(df.exists()){
+			if(!df.delete()){
+				System.err.print("delete file error !");
+			}
+		}else{
+			System.out.println("file not exit!");
+		}
+		return true;
+	}
+	/**
+	 * Runs the demo.
+	 */
+	public static void main(String[] args) throws IOException {
+		
+		String[] col_family = {column_family};
+		Path text_path = new Path(text_tmp);
+		
+//		setup.parseFirstLine(source_file, text_tmp);
+//		System.out.println(first_line);
+		new SnortParser(source_file,text_tmp);
+		
+		
+		BuildHTable build_table = new BuildHTable(table_name,
+				col_family);
+		if (!build_table.checkTableExist(table_name)) {
+			if (!build_table.createTable()) {
+				System.out.println("create table error !");
+			}
+		} else {
+			System.out.println("Table \"" + table_name
+					+ "\" has already existed !");
+		}
+		JobConf conf = new JobConf(SnortUploadHbase.class);
+		FileSystem fileconf = FileSystem.get(conf);
+		fileconf.copyFromLocalFile(true, text_path, text_path);
+		// Job name; you can modify to any you like
+		conf.setJobName("SnortDataBase");
+		final int mapTasks = 1;
+		final int reduceTasks = 1;
+		// Hbase table name must be correct , in our profile is t1_table
+		TableReduce.initJob(table_name, ReduceClass.class, conf);
+
+		// below are map-reduce profile
+		conf.setNumMapTasks(mapTasks);
+		conf.setNumReduceTasks(reduceTasks);
+		
+		conf.setInputPath(text_path);
+
+		
+		conf.setMapperClass(IdentityMapper.class);
+		conf.setCombinerClass(IdentityReducer.class);
+		conf.setReducerClass(ReduceClass.class);
+
+		JobClient.runJob(conf);
+		
+		// delete tmp file
+		// 0.16
+		FileSystem.get(conf).delete(text_path);
+		
+	}
+}