mirror of
https://github.com/zeek/zeek.git
synced 2025-10-10 18:48:20 +00:00
Move NetVar.h to zeek namespace
This commit is contained in:
Tim Wojtulewicz
parent
e7c6d51ae7
commit
289c03d386
3 changed files with 341 additions and 162 deletions
237
src/NetVar.cc
237
src/NetVar.cc
|
|
@ -30,6 +30,84 @@ zeek::VectorType* index_vec;
|
|||
zeek::VectorType* mime_matches;
|
||||
zeek::RecordType* mime_match;
|
||||
|
||||
zeek::RecordType* socks_address;
|
||||
|
||||
zeek::TableVal* tcp_reassembler_ports_orig;
|
||||
zeek::TableVal* tcp_reassembler_ports_resp;
|
||||
|
||||
zeek::TableVal* tcp_content_delivery_ports_orig;
|
||||
zeek::TableVal* tcp_content_delivery_ports_resp;
|
||||
|
||||
zeek::TableVal* udp_content_delivery_ports_orig;
|
||||
zeek::TableVal* udp_content_delivery_ports_resp;
|
||||
zeek::TableVal* udp_content_ports;
|
||||
|
||||
zeek::RecordType* mime_header_rec;
|
||||
zeek::TableType* mime_header_list;
|
||||
|
||||
zeek::RecordType* http_stats_rec;
|
||||
zeek::RecordType* http_message_stat;
|
||||
|
||||
zeek::RecordType* pm_mapping;
|
||||
zeek::TableType* pm_mappings;
|
||||
zeek::RecordType* pm_port_request;
|
||||
zeek::RecordType* pm_callit_request;
|
||||
|
||||
zeek::RecordType* geo_location;
|
||||
|
||||
zeek::RecordType* entropy_test_result;
|
||||
|
||||
zeek::RecordType* dns_msg;
|
||||
zeek::RecordType* dns_answer;
|
||||
zeek::RecordType* dns_soa;
|
||||
zeek::RecordType* dns_edns_additional;
|
||||
zeek::RecordType* dns_edns_ecs;
|
||||
zeek::RecordType* dns_tsig_additional;
|
||||
zeek::RecordType* dns_rrsig_rr;
|
||||
zeek::RecordType* dns_dnskey_rr;
|
||||
zeek::RecordType* dns_nsec3_rr;
|
||||
zeek::RecordType* dns_ds_rr;
|
||||
zeek::TableVal* dns_skip_auth;
|
||||
zeek::TableVal* dns_skip_addl;
|
||||
|
||||
zeek::TableVal* stp_skip_src;
|
||||
|
||||
zeek::TableVal* preserve_orig_addr;
|
||||
zeek::TableVal* preserve_resp_addr;
|
||||
zeek::TableVal* preserve_other_addr;
|
||||
|
||||
zeek::RecordType* rotate_info;
|
||||
zeek::StringVal* log_rotate_base_time;
|
||||
|
||||
zeek::StringVal* peer_description;
|
||||
|
||||
zeek::Val* profiling_file;
|
||||
zeek::Val* pkt_profile_file;
|
||||
|
||||
zeek::TableType* irc_join_list;
|
||||
zeek::RecordType* irc_join_info;
|
||||
|
||||
zeek::TableVal* likely_server_ports;
|
||||
|
||||
zeek::StringVal* trace_output_file;
|
||||
|
||||
zeek::RecordType* script_id;
|
||||
zeek::TableType* id_table;
|
||||
zeek::RecordType* record_field;
|
||||
zeek::TableType* record_field_table;
|
||||
zeek::RecordType* call_argument;
|
||||
zeek::VectorType* call_argument_vector;
|
||||
|
||||
zeek::StringVal* cmd_line_bpf_filter;
|
||||
|
||||
zeek::StringVal* global_hash_seed;
|
||||
|
||||
// Because of how the BIF include files are built with namespaces already in them,
|
||||
// these files need to be included separately before the namespace is opened below.
|
||||
|
||||
|
||||
namespace zeek {
|
||||
|
||||
int watchdog_interval;
|
||||
|
||||
int max_timer_expires;
|
||||
|
|
@ -56,8 +134,6 @@ int tcp_max_above_hole_without_any_acks;
|
|||
int tcp_excessive_data_without_further_acks;
|
||||
int tcp_max_old_segments;
|
||||
|
||||
zeek::RecordType* socks_address;
|
||||
|
||||
double non_analyzed_lifetime;
|
||||
double tcp_inactivity_timeout;
|
||||
double udp_inactivity_timeout;
|
||||
|
|
@ -66,17 +142,8 @@ double icmp_inactivity_timeout;
|
|||
int tcp_storm_thresh;
|
||||
double tcp_storm_interarrival_thresh;
|
||||
|
||||
zeek::TableVal* tcp_reassembler_ports_orig;
|
||||
zeek::TableVal* tcp_reassembler_ports_resp;
|
||||
|
||||
zeek::TableVal* tcp_content_delivery_ports_orig;
|
||||
zeek::TableVal* tcp_content_delivery_ports_resp;
|
||||
bool tcp_content_deliver_all_orig;
|
||||
bool tcp_content_deliver_all_resp;
|
||||
|
||||
zeek::TableVal* udp_content_delivery_ports_orig;
|
||||
zeek::TableVal* udp_content_delivery_ports_resp;
|
||||
zeek::TableVal* udp_content_ports;
|
||||
bool udp_content_deliver_all_orig;
|
||||
bool udp_content_deliver_all_resp;
|
||||
bool udp_content_delivery_ports_use_resp;
|
||||
|
|
@ -86,42 +153,15 @@ double rpc_timeout;
|
|||
|
||||
int mime_segment_length;
|
||||
int mime_segment_overlap_length;
|
||||
zeek::RecordType* mime_header_rec;
|
||||
zeek::TableType* mime_header_list;
|
||||
|
||||
int http_entity_data_delivery_size;
|
||||
zeek::RecordType* http_stats_rec;
|
||||
zeek::RecordType* http_message_stat;
|
||||
int truncate_http_URI;
|
||||
|
||||
zeek::RecordType* pm_mapping;
|
||||
zeek::TableType* pm_mappings;
|
||||
zeek::RecordType* pm_port_request;
|
||||
zeek::RecordType* pm_callit_request;
|
||||
|
||||
zeek::RecordType* geo_location;
|
||||
|
||||
zeek::RecordType* entropy_test_result;
|
||||
|
||||
zeek::RecordType* dns_msg;
|
||||
zeek::RecordType* dns_answer;
|
||||
zeek::RecordType* dns_soa;
|
||||
zeek::RecordType* dns_edns_additional;
|
||||
zeek::RecordType* dns_edns_ecs;
|
||||
zeek::RecordType* dns_tsig_additional;
|
||||
zeek::RecordType* dns_rrsig_rr;
|
||||
zeek::RecordType* dns_dnskey_rr;
|
||||
zeek::RecordType* dns_nsec3_rr;
|
||||
zeek::RecordType* dns_ds_rr;
|
||||
zeek::TableVal* dns_skip_auth;
|
||||
zeek::TableVal* dns_skip_addl;
|
||||
int dns_skip_all_auth;
|
||||
int dns_skip_all_addl;
|
||||
int dns_max_queries;
|
||||
|
||||
double stp_delta;
|
||||
double stp_idle_min;
|
||||
zeek::TableVal* stp_skip_src;
|
||||
|
||||
double table_expire_interval;
|
||||
double table_expire_delay;
|
||||
|
|
@ -131,22 +171,12 @@ double connection_status_update_interval;
|
|||
|
||||
int orig_addr_anonymization, resp_addr_anonymization;
|
||||
int other_addr_anonymization;
|
||||
zeek::TableVal* preserve_orig_addr;
|
||||
zeek::TableVal* preserve_resp_addr;
|
||||
zeek::TableVal* preserve_other_addr;
|
||||
|
||||
zeek::RecordType* rotate_info;
|
||||
zeek::StringVal* log_rotate_base_time;
|
||||
|
||||
zeek::StringVal* peer_description;
|
||||
|
||||
zeek::Val* profiling_file;
|
||||
double profiling_interval;
|
||||
int expensive_profiling_multiple;
|
||||
int segment_profiling;
|
||||
int pkt_profile_mode;
|
||||
double pkt_profile_freq;
|
||||
zeek::Val* pkt_profile_file;
|
||||
|
||||
int load_sample_freq;
|
||||
|
||||
|
|
@ -154,47 +184,47 @@ int packet_filter_default;
|
|||
|
||||
int sig_max_group_size;
|
||||
|
||||
zeek::TableType* irc_join_list;
|
||||
zeek::RecordType* irc_join_info;
|
||||
|
||||
int dpd_reassemble_first_packets;
|
||||
int dpd_buffer_size;
|
||||
int dpd_match_only_beginning;
|
||||
int dpd_late_match_stop;
|
||||
int dpd_ignore_ports;
|
||||
|
||||
zeek::TableVal* likely_server_ports;
|
||||
|
||||
int check_for_unused_event_handlers;
|
||||
|
||||
double timer_mgr_inactivity_timeout;
|
||||
|
||||
zeek::StringVal* trace_output_file;
|
||||
|
||||
int record_all_packets;
|
||||
|
||||
zeek::RecordType* script_id;
|
||||
zeek::TableType* id_table;
|
||||
zeek::RecordType* record_field;
|
||||
zeek::TableType* record_field_table;
|
||||
zeek::RecordType* call_argument;
|
||||
zeek::VectorType* call_argument_vector;
|
||||
|
||||
zeek::StringVal* cmd_line_bpf_filter;
|
||||
|
||||
zeek::StringVal* global_hash_seed;
|
||||
|
||||
bro_uint_t bits_per_uid;
|
||||
|
||||
} // namespace zeek. The namespace has be closed here before we include the netvar_def files.
|
||||
|
||||
static void bif_init_event_handlers()
|
||||
{
|
||||
#include "event.bif.netvar_init"
|
||||
}
|
||||
|
||||
static void bif_init_net_var()
|
||||
{
|
||||
#include "const.bif.netvar_init"
|
||||
#include "types.bif.netvar_init"
|
||||
#include "reporter.bif.netvar_init"
|
||||
#include "supervisor.bif.netvar_init"
|
||||
}
|
||||
|
||||
#include "const.bif.netvar_def"
|
||||
#include "types.bif.netvar_def"
|
||||
#include "event.bif.netvar_def"
|
||||
#include "reporter.bif.netvar_def"
|
||||
#include "supervisor.bif.netvar_def"
|
||||
|
||||
// Re-open the namespace now that the bif headers are all included.
|
||||
namespace zeek {
|
||||
|
||||
void init_event_handlers()
|
||||
{
|
||||
#include "event.bif.netvar_init"
|
||||
bif_init_event_handlers();
|
||||
}
|
||||
|
||||
void init_general_global_var()
|
||||
|
|
@ -213,10 +243,7 @@ extern void zeek_legacy_netvar_init();
|
|||
|
||||
void init_net_var()
|
||||
{
|
||||
#include "const.bif.netvar_init"
|
||||
#include "types.bif.netvar_init"
|
||||
#include "reporter.bif.netvar_init"
|
||||
#include "supervisor.bif.netvar_init"
|
||||
bif_init_net_var();
|
||||
|
||||
zeek::id::detail::init();
|
||||
zeek_legacy_netvar_init();
|
||||
|
|
@ -320,3 +347,71 @@ void init_net_var()
|
|||
|
||||
timer_mgr_inactivity_timeout = zeek::id::find_val("timer_mgr_inactivity_timeout")->AsInterval();
|
||||
}
|
||||
|
||||
} // namespace zeek
|
||||
// Remove in v4.1.
|
||||
int& watchdog_interval = zeek::watchdog_interval;
|
||||
int& max_timer_expires = zeek::max_timer_expires;
|
||||
int& ignore_checksums = zeek::ignore_checksums;
|
||||
int& partial_connection_ok = zeek::partial_connection_ok;
|
||||
int& tcp_SYN_ack_ok = zeek::tcp_SYN_ack_ok;
|
||||
int& tcp_match_undelivered = zeek::tcp_match_undelivered;
|
||||
int& encap_hdr_size = zeek::encap_hdr_size;
|
||||
double& frag_timeout = zeek::frag_timeout;
|
||||
double& tcp_SYN_timeout = zeek::tcp_SYN_timeout;
|
||||
double& tcp_session_timer = zeek::tcp_session_timer;
|
||||
double& tcp_connection_linger = zeek::tcp_connection_linger;
|
||||
double& tcp_attempt_delay = zeek::tcp_attempt_delay;
|
||||
double& tcp_close_delay = zeek::tcp_close_delay;
|
||||
double& tcp_partial_close_delay = zeek::tcp_partial_close_delay;
|
||||
double& tcp_reset_delay = zeek::tcp_reset_delay;
|
||||
int& tcp_max_initial_window = zeek::tcp_max_initial_window;
|
||||
int& tcp_max_above_hole_without_any_acks = zeek::tcp_max_above_hole_without_any_acks;
|
||||
int& tcp_excessive_data_without_further_acks = zeek::tcp_excessive_data_without_further_acks;
|
||||
int& tcp_max_old_segments = zeek::tcp_max_old_segments;
|
||||
double& non_analyzed_lifetime = zeek::non_analyzed_lifetime;
|
||||
double& tcp_inactivity_timeout = zeek::tcp_inactivity_timeout;
|
||||
double& udp_inactivity_timeout = zeek::udp_inactivity_timeout;
|
||||
double& icmp_inactivity_timeout = zeek::icmp_inactivity_timeout;
|
||||
int& tcp_storm_thresh = zeek::tcp_storm_thresh;
|
||||
double& tcp_storm_interarrival_thresh = zeek::tcp_storm_interarrival_thresh;
|
||||
bool& tcp_content_deliver_all_orig = zeek::tcp_content_deliver_all_orig;
|
||||
bool& tcp_content_deliver_all_resp = zeek::tcp_content_deliver_all_resp;
|
||||
bool& udp_content_deliver_all_orig = zeek::udp_content_deliver_all_orig;
|
||||
bool& udp_content_deliver_all_resp = zeek::udp_content_deliver_all_resp;
|
||||
bool& udp_content_delivery_ports_use_resp = zeek::udp_content_delivery_ports_use_resp;
|
||||
double& dns_session_timeout = zeek::dns_session_timeout;
|
||||
double& rpc_timeout = zeek::rpc_timeout;
|
||||
int& mime_segment_length = zeek::mime_segment_length;
|
||||
int& mime_segment_overlap_length = zeek::mime_segment_overlap_length;
|
||||
int& http_entity_data_delivery_size = zeek::http_entity_data_delivery_size;
|
||||
int& truncate_http_URI = zeek::truncate_http_URI;
|
||||
int& dns_skip_all_auth = zeek::dns_skip_all_auth;
|
||||
int& dns_skip_all_addl = zeek::dns_skip_all_addl;
|
||||
int& dns_max_queries = zeek::dns_max_queries;
|
||||
double& stp_delta = zeek::stp_delta;
|
||||
double& stp_idle_min = zeek::stp_idle_min;
|
||||
double& table_expire_interval = zeek::table_expire_interval;
|
||||
double& table_expire_delay = zeek::table_expire_delay;
|
||||
int& table_incremental_step = zeek::table_incremental_step;
|
||||
int& orig_addr_anonymization = zeek::orig_addr_anonymization;
|
||||
int& resp_addr_anonymization = zeek::resp_addr_anonymization;
|
||||
int& other_addr_anonymization = zeek::other_addr_anonymization;
|
||||
double& connection_status_update_interval = zeek::connection_status_update_interval;
|
||||
double& profiling_interval = zeek::profiling_interval;
|
||||
int& expensive_profiling_multiple = zeek::expensive_profiling_multiple;
|
||||
int& segment_profiling = zeek::segment_profiling;
|
||||
int& pkt_profile_mode = zeek::pkt_profile_mode;
|
||||
double& pkt_profile_freq = zeek::pkt_profile_freq;
|
||||
int& load_sample_freq = zeek::load_sample_freq;
|
||||
int& packet_filter_default = zeek::packet_filter_default;
|
||||
int& sig_max_group_size = zeek::sig_max_group_size;
|
||||
int& dpd_reassemble_first_packets = zeek::dpd_reassemble_first_packets;
|
||||
int& dpd_buffer_size = zeek::dpd_buffer_size;
|
||||
int& dpd_match_only_beginning = zeek::dpd_match_only_beginning;
|
||||
int& dpd_late_match_stop = zeek::dpd_late_match_stop;
|
||||
int& dpd_ignore_ports = zeek::dpd_ignore_ports;
|
||||
int& check_for_unused_event_handlers = zeek::check_for_unused_event_handlers;
|
||||
double& timer_mgr_inactivity_timeout = zeek::timer_mgr_inactivity_timeout;
|
||||
int& record_all_packets = zeek::record_all_packets;
|
||||
bro_uint_t& bits_per_uid = zeek::bits_per_uid;
|
||||
|
|
|
|||
262
src/NetVar.h
262
src/NetVar.h
|
|
@ -6,6 +6,177 @@
|
|||
#include "EventRegistry.h"
|
||||
#include "Stats.h"
|
||||
|
||||
namespace zeek {
|
||||
|
||||
extern int watchdog_interval;
|
||||
|
||||
extern int max_timer_expires;
|
||||
|
||||
extern int ignore_checksums;
|
||||
extern int partial_connection_ok;
|
||||
extern int tcp_SYN_ack_ok;
|
||||
extern int tcp_match_undelivered;
|
||||
|
||||
extern int encap_hdr_size;
|
||||
|
||||
extern double frag_timeout;
|
||||
|
||||
extern double tcp_SYN_timeout;
|
||||
extern double tcp_session_timer;
|
||||
extern double tcp_connection_linger;
|
||||
extern double tcp_attempt_delay;
|
||||
extern double tcp_close_delay;
|
||||
extern double tcp_partial_close_delay;
|
||||
extern double tcp_reset_delay;
|
||||
|
||||
extern int tcp_max_initial_window;
|
||||
extern int tcp_max_above_hole_without_any_acks;
|
||||
extern int tcp_excessive_data_without_further_acks;
|
||||
extern int tcp_max_old_segments;
|
||||
|
||||
extern double non_analyzed_lifetime;
|
||||
extern double tcp_inactivity_timeout;
|
||||
extern double udp_inactivity_timeout;
|
||||
extern double icmp_inactivity_timeout;
|
||||
|
||||
extern int tcp_storm_thresh;
|
||||
extern double tcp_storm_interarrival_thresh;
|
||||
extern bool tcp_content_deliver_all_orig;
|
||||
extern bool tcp_content_deliver_all_resp;
|
||||
|
||||
extern bool udp_content_deliver_all_orig;
|
||||
extern bool udp_content_deliver_all_resp;
|
||||
extern bool udp_content_delivery_ports_use_resp;
|
||||
|
||||
extern double dns_session_timeout;
|
||||
extern double rpc_timeout;
|
||||
|
||||
extern int mime_segment_length;
|
||||
extern int mime_segment_overlap_length;
|
||||
|
||||
extern int http_entity_data_delivery_size;
|
||||
extern int truncate_http_URI;
|
||||
|
||||
extern int dns_skip_all_auth;
|
||||
extern int dns_skip_all_addl;
|
||||
extern int dns_max_queries;
|
||||
|
||||
extern double stp_delta;
|
||||
extern double stp_idle_min;
|
||||
extern double table_expire_interval;
|
||||
extern double table_expire_delay;
|
||||
extern int table_incremental_step;
|
||||
|
||||
extern int orig_addr_anonymization, resp_addr_anonymization;
|
||||
extern int other_addr_anonymization;
|
||||
|
||||
extern double connection_status_update_interval;
|
||||
|
||||
extern double profiling_interval;
|
||||
extern int expensive_profiling_multiple;
|
||||
|
||||
extern int segment_profiling;
|
||||
extern int pkt_profile_mode;
|
||||
extern double pkt_profile_freq;
|
||||
extern int load_sample_freq;
|
||||
|
||||
extern int packet_filter_default;
|
||||
|
||||
extern int sig_max_group_size;
|
||||
|
||||
extern int dpd_reassemble_first_packets;
|
||||
extern int dpd_buffer_size;
|
||||
extern int dpd_match_only_beginning;
|
||||
extern int dpd_late_match_stop;
|
||||
extern int dpd_ignore_ports;
|
||||
|
||||
extern int check_for_unused_event_handlers;
|
||||
|
||||
extern double timer_mgr_inactivity_timeout;
|
||||
|
||||
extern int record_all_packets;
|
||||
|
||||
extern bro_uint_t bits_per_uid;
|
||||
|
||||
// Initializes globals that don't pertain to network/event analysis.
|
||||
extern void init_general_global_var();
|
||||
|
||||
extern void init_event_handlers();
|
||||
extern void init_net_var();
|
||||
|
||||
} // namespace zeek
|
||||
|
||||
constexpr auto init_general_global_var [[deprecated("Remove in v4.1. Use zeek::init_general_global_var.")]] = zeek::init_general_global_var;
|
||||
constexpr auto init_event_handlers [[deprecated("Remove in v4.1. Use zeek::init_event_handlers.")]] = zeek::init_event_handlers;
|
||||
constexpr auto init_net_var [[deprecated("Remove in v4.1. Use zeek::init_net_var.")]] = zeek::init_net_var;
|
||||
|
||||
extern int& watchdog_interval [[deprecated("Remove in v4.1. Use zeek::watchdog_interval.")]];
|
||||
extern int& max_timer_expires [[deprecated("Remove in v4.1. Use zeek::max_timer_expires.")]];
|
||||
extern int& ignore_checksums [[deprecated("Remove in v4.1. Use zeek::ignore_checksums.")]];
|
||||
extern int& partial_connection_ok [[deprecated("Remove in v4.1. Use zeek::partial_connection_ok.")]];
|
||||
extern int& tcp_SYN_ack_ok [[deprecated("Remove in v4.1. Use zeek::tcp_SYN_ack_ok.")]];
|
||||
extern int& tcp_match_undelivered [[deprecated("Remove in v4.1. Use zeek::tcp_match_undelivered.")]];
|
||||
extern int& encap_hdr_size [[deprecated("Remove in v4.1. Use zeek::encap_hdr_size.")]];
|
||||
extern double& frag_timeout [[deprecated("Remove in v4.1. Use zeek::frag_timeout.")]];
|
||||
extern double& tcp_SYN_timeout [[deprecated("Remove in v4.1. Use zeek::tcp_SYN_timeout.")]];
|
||||
extern double& tcp_session_timer [[deprecated("Remove in v4.1. Use zeek::tcp_session_timer.")]];
|
||||
extern double& tcp_connection_linger [[deprecated("Remove in v4.1. Use zeek::tcp_connection_linger.")]];
|
||||
extern double& tcp_attempt_delay [[deprecated("Remove in v4.1. Use zeek::tcp_attempt_delay.")]];
|
||||
extern double& tcp_close_delay [[deprecated("Remove in v4.1. Use zeek::tcp_close_delay.")]];
|
||||
extern double& tcp_partial_close_delay [[deprecated("Remove in v4.1. Use zeek::tcp_partial_close_delay.")]];
|
||||
extern double& tcp_reset_delay [[deprecated("Remove in v4.1. Use zeek::tcp_reset_delay.")]];
|
||||
extern int& tcp_max_initial_window [[deprecated("Remove in v4.1. Use zeek::tcp_max_initial_window.")]];
|
||||
extern int& tcp_max_above_hole_without_any_acks [[deprecated("Remove in v4.1. Use zeek::tcp_max_above_hole_without_any_acks.")]];
|
||||
extern int& tcp_excessive_data_without_further_acks [[deprecated("Remove in v4.1. Use zeek::tcp_excessive_data_without_further_acks.")]];
|
||||
extern int& tcp_max_old_segments [[deprecated("Remove in v4.1. Use zeek::tcp_max_old_segments.")]];
|
||||
extern double& non_analyzed_lifetime [[deprecated("Remove in v4.1. Use zeek::non_analyzed_lifetime.")]];
|
||||
extern double& tcp_inactivity_timeout [[deprecated("Remove in v4.1. Use zeek::tcp_inactivity_timeout.")]];
|
||||
extern double& udp_inactivity_timeout [[deprecated("Remove in v4.1. Use zeek::udp_inactivity_timeout.")]];
|
||||
extern double& icmp_inactivity_timeout [[deprecated("Remove in v4.1. Use zeek::icmp_inactivity_timeout.")]];
|
||||
extern int& tcp_storm_thresh [[deprecated("Remove in v4.1. Use zeek::tcp_storm_thresh.")]];
|
||||
extern double& tcp_storm_interarrival_thresh [[deprecated("Remove in v4.1. Use zeek::tcp_storm_interarrival_thresh.")]];
|
||||
extern bool& tcp_content_deliver_all_orig [[deprecated("Remove in v4.1. Use zeek::tcp_content_deliver_all_orig.")]];
|
||||
extern bool& tcp_content_deliver_all_resp [[deprecated("Remove in v4.1. Use zeek::tcp_content_deliver_all_resp.")]];
|
||||
extern bool& udp_content_deliver_all_orig [[deprecated("Remove in v4.1. Use zeek::udp_content_deliver_all_orig.")]];
|
||||
extern bool& udp_content_deliver_all_resp [[deprecated("Remove in v4.1. Use zeek::udp_content_deliver_all_resp.")]];
|
||||
extern bool& udp_content_delivery_ports_use_resp [[deprecated("Remove in v4.1. Use zeek::udp_content_delivery_ports_use_resp.")]];
|
||||
extern double& dns_session_timeout [[deprecated("Remove in v4.1. Use zeek::dns_session_timeout.")]];
|
||||
extern double& rpc_timeout [[deprecated("Remove in v4.1. Use zeek::rpc_timeout.")]];
|
||||
extern int& mime_segment_length [[deprecated("Remove in v4.1. Use zeek::mime_segment_length.")]];
|
||||
extern int& mime_segment_overlap_length [[deprecated("Remove in v4.1. Use zeek::mime_segment_overlap_length.")]];
|
||||
extern int& http_entity_data_delivery_size [[deprecated("Remove in v4.1. Use zeek::http_entity_data_delivery_size.")]];
|
||||
extern int& truncate_http_URI [[deprecated("Remove in v4.1. Use zeek::truncate_http_URI.")]];
|
||||
extern int& dns_skip_all_auth [[deprecated("Remove in v4.1. Use zeek::dns_skip_all_auth.")]];
|
||||
extern int& dns_skip_all_addl [[deprecated("Remove in v4.1. Use zeek::dns_skip_all_addl.")]];
|
||||
extern int& dns_max_queries [[deprecated("Remove in v4.1. Use zeek::dns_max_queries.")]];
|
||||
extern double& stp_delta [[deprecated("Remove in v4.1. Use zeek::stp_delta.")]];
|
||||
extern double& stp_idle_min [[deprecated("Remove in v4.1. Use zeek::stp_idle_min.")]];
|
||||
extern double& table_expire_interval [[deprecated("Remove in v4.1. Use zeek::table_expire_interval.")]];
|
||||
extern double& table_expire_delay [[deprecated("Remove in v4.1. Use zeek::table_expire_delay.")]];
|
||||
extern int& table_incremental_step [[deprecated("Remove in v4.1. Use zeek::table_incremental_step.")]];
|
||||
extern int& orig_addr_anonymization [[deprecated("Remove in v4.1. Use zeek::orig_addr_anonymization.")]];
|
||||
extern int& resp_addr_anonymization [[deprecated("Remove in v4.1. Use zeek::resp_addr_anonymization.")]];
|
||||
extern int& other_addr_anonymization [[deprecated("Remove in v4.1. Use zeek::other_addr_anonymization.")]];
|
||||
extern double& connection_status_update_interval [[deprecated("Remove in v4.1. Use zeek::connection_status_update_interval.")]];
|
||||
extern double& profiling_interval [[deprecated("Remove in v4.1. Use zeek::profiling_interval.")]];
|
||||
extern int& expensive_profiling_multiple [[deprecated("Remove in v4.1. Use zeek::expensive_profiling_multiple.")]];
|
||||
extern int& segment_profiling [[deprecated("Remove in v4.1. Use zeek::segment_profiling.")]];
|
||||
extern int& pkt_profile_mode [[deprecated("Remove in v4.1. Use zeek::pkt_profile_mode.")]];
|
||||
extern double& pkt_profile_freq [[deprecated("Remove in v4.1. Use zeek::pkt_profile_freq.")]];
|
||||
extern int& load_sample_freq [[deprecated("Remove in v4.1. Use zeek::load_sample_freq.")]];
|
||||
extern int& packet_filter_default [[deprecated("Remove in v4.1. Use zeek::packet_filter_default.")]];
|
||||
extern int& sig_max_group_size [[deprecated("Remove in v4.1. Use zeek::sig_max_group_size.")]];
|
||||
extern int& dpd_reassemble_first_packets [[deprecated("Remove in v4.1. Use zeek::dpd_reassemble_first_packets.")]];
|
||||
extern int& dpd_buffer_size [[deprecated("Remove in v4.1. Use zeek::dpd_buffer_size.")]];
|
||||
extern int& dpd_match_only_beginning [[deprecated("Remove in v4.1. Use zeek::dpd_match_only_beginning.")]];
|
||||
extern int& dpd_late_match_stop [[deprecated("Remove in v4.1. Use zeek::dpd_late_match_stop.")]];
|
||||
extern int& dpd_ignore_ports [[deprecated("Remove in v4.1. Use zeek::dpd_ignore_ports.")]];
|
||||
extern int& check_for_unused_event_handlers [[deprecated("Remove in v4.1. Use zeek::check_for_unused_event_handlers.")]];
|
||||
extern double& timer_mgr_inactivity_timeout [[deprecated("Remove in v4.1. Use zeek::timer_mgr_inactivity_timeout.")]];
|
||||
extern int& record_all_packets [[deprecated("Remove in v4.1. Use zeek::record_all_packets.")]];
|
||||
extern bro_uint_t& bits_per_uid [[deprecated("Remove in v4.1. Use zeek::bits_per_uid.")]];
|
||||
|
||||
|
||||
[[deprecated("Remove in v4.1. Use zeek::id::conn_id.")]]
|
||||
extern zeek::RecordType* conn_id;
|
||||
[[deprecated("Remove in v4.1. Use zeek::id::endpoint.")]]
|
||||
|
|
@ -49,43 +220,9 @@ extern zeek::VectorType* mime_matches;
|
|||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::RecordType* mime_match;
|
||||
|
||||
extern int watchdog_interval;
|
||||
|
||||
extern int max_timer_expires;
|
||||
|
||||
extern int ignore_checksums;
|
||||
extern int partial_connection_ok;
|
||||
extern int tcp_SYN_ack_ok;
|
||||
extern int tcp_match_undelivered;
|
||||
|
||||
extern int encap_hdr_size;
|
||||
|
||||
extern double frag_timeout;
|
||||
|
||||
extern double tcp_SYN_timeout;
|
||||
extern double tcp_session_timer;
|
||||
extern double tcp_connection_linger;
|
||||
extern double tcp_attempt_delay;
|
||||
extern double tcp_close_delay;
|
||||
extern double tcp_partial_close_delay;
|
||||
extern double tcp_reset_delay;
|
||||
|
||||
extern int tcp_max_initial_window;
|
||||
extern int tcp_max_above_hole_without_any_acks;
|
||||
extern int tcp_excessive_data_without_further_acks;
|
||||
extern int tcp_max_old_segments;
|
||||
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::RecordType* socks_address;
|
||||
|
||||
extern double non_analyzed_lifetime;
|
||||
extern double tcp_inactivity_timeout;
|
||||
extern double udp_inactivity_timeout;
|
||||
extern double icmp_inactivity_timeout;
|
||||
|
||||
extern int tcp_storm_thresh;
|
||||
extern double tcp_storm_interarrival_thresh;
|
||||
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::TableVal* tcp_reassembler_ports_orig;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
|
|
@ -95,8 +232,6 @@ extern zeek::TableVal* tcp_reassembler_ports_resp;
|
|||
extern zeek::TableVal* tcp_content_delivery_ports_orig;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::TableVal* tcp_content_delivery_ports_resp;
|
||||
extern bool tcp_content_deliver_all_orig;
|
||||
extern bool tcp_content_deliver_all_resp;
|
||||
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::TableVal* udp_content_delivery_ports_orig;
|
||||
|
|
@ -104,26 +239,15 @@ extern zeek::TableVal* udp_content_delivery_ports_orig;
|
|||
extern zeek::TableVal* udp_content_delivery_ports_resp;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::TableVal* udp_content_ports;
|
||||
extern bool udp_content_deliver_all_orig;
|
||||
extern bool udp_content_deliver_all_resp;
|
||||
extern bool udp_content_delivery_ports_use_resp;
|
||||
|
||||
extern double dns_session_timeout;
|
||||
extern double rpc_timeout;
|
||||
|
||||
extern int mime_segment_length;
|
||||
extern int mime_segment_overlap_length;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::RecordType* mime_header_rec;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::TableType* mime_header_list;
|
||||
|
||||
extern int http_entity_data_delivery_size;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::RecordType* http_stats_rec;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::RecordType* http_message_stat;
|
||||
extern int truncate_http_URI;
|
||||
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::RecordType* pm_mapping;
|
||||
|
|
@ -164,21 +288,10 @@ extern zeek::RecordType* dns_ds_rr;
|
|||
extern zeek::TableVal* dns_skip_auth;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::TableVal* dns_skip_addl;
|
||||
extern int dns_skip_all_auth;
|
||||
extern int dns_skip_all_addl;
|
||||
extern int dns_max_queries;
|
||||
|
||||
extern double stp_delta;
|
||||
extern double stp_idle_min;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::TableVal* stp_skip_src;
|
||||
|
||||
extern double table_expire_interval;
|
||||
extern double table_expire_delay;
|
||||
extern int table_incremental_step;
|
||||
|
||||
extern int orig_addr_anonymization, resp_addr_anonymization;
|
||||
extern int other_addr_anonymization;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::TableVal* preserve_orig_addr;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
|
|
@ -186,8 +299,6 @@ extern zeek::TableVal* preserve_resp_addr;
|
|||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::TableVal* preserve_other_addr;
|
||||
|
||||
extern double connection_status_update_interval;
|
||||
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::RecordType* rotate_info;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
|
|
@ -198,44 +309,21 @@ extern zeek::StringVal* peer_description;
|
|||
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::Val* profiling_file;
|
||||
extern double profiling_interval;
|
||||
extern int expensive_profiling_multiple;
|
||||
|
||||
extern int segment_profiling;
|
||||
extern int pkt_profile_mode;
|
||||
extern double pkt_profile_freq;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::Val* pkt_profile_file;
|
||||
|
||||
extern int load_sample_freq;
|
||||
|
||||
extern int packet_filter_default;
|
||||
|
||||
extern int sig_max_group_size;
|
||||
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::TableType* irc_join_list;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::RecordType* irc_join_info;
|
||||
|
||||
extern int dpd_reassemble_first_packets;
|
||||
extern int dpd_buffer_size;
|
||||
extern int dpd_match_only_beginning;
|
||||
extern int dpd_late_match_stop;
|
||||
extern int dpd_ignore_ports;
|
||||
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::TableVal* likely_server_ports;
|
||||
|
||||
extern int check_for_unused_event_handlers;
|
||||
|
||||
extern double timer_mgr_inactivity_timeout;
|
||||
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::StringVal* trace_output_file;
|
||||
|
||||
extern int record_all_packets;
|
||||
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::RecordType* script_id;
|
||||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
|
|
@ -255,14 +343,6 @@ extern zeek::StringVal* cmd_line_bpf_filter;
|
|||
[[deprecated("Remove in v4.1. Perform your own lookup.")]]
|
||||
extern zeek::StringVal* global_hash_seed;
|
||||
|
||||
extern bro_uint_t bits_per_uid;
|
||||
|
||||
// Initializes globals that don't pertain to network/event analysis.
|
||||
extern void init_general_global_var();
|
||||
|
||||
extern void init_event_handlers();
|
||||
extern void init_net_var();
|
||||
|
||||
#include "const.bif.netvar_h"
|
||||
#include "types.bif.netvar_h"
|
||||
#include "event.bif.netvar_h"
|
||||
|
|
|
|||
|
|
@ -4,6 +4,8 @@
|
|||
#include "ID.h"
|
||||
#include "Scope.h"
|
||||
|
||||
namespace zeek {
|
||||
|
||||
// Compiled separately to avoid deprecation warnings at the assignment sites.
|
||||
void zeek_legacy_netvar_init()
|
||||
{
|
||||
|
|
@ -92,3 +94,5 @@ void zeek_legacy_netvar_init()
|
|||
if ( anon_id )
|
||||
preserve_other_addr = anon_id->GetVal()->AsTableVal();
|
||||
}
|
||||
|
||||
} // namespace zeek
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue