Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-07 17:18:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Porting syslog analyzer as another example.

Browse source 
The diff to this commit shows what "porting" involves ...

This also adds a small test for syslog.
This commit is contained in:
Robin Sommer 2013-04-05 13:12:16 -07:00
parent d5865c67cb
commit 1a30a57816
16 changed files with 85 additions and 48 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/base/protocols/syslog/main.bro
View file

@ -38,7 +38,7 @@ redef record connection += {
event bro_init() &priority=5
{
Log::create_stream(Syslog::LOG, [$columns=Info]);
Analyzer::register_for_ports(Analyzer::ANALYZER_SYSLOG_BINPAC, ports);
Analyzer::register_for_ports(Analyzer::ANALYZER_SYSLOG, ports);
}
event syslog_message(c: connection, facility: count, severity: count, msg: string) &priority=5