mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
Add some missing Bro script documentation
Also fixed a few reST formatting issues.
This commit is contained in:
parent
28125e367e
commit
2d9127888f
13 changed files with 25 additions and 12 deletions
|
@ -39,6 +39,8 @@ Network Protocols
|
||||||
+----------------------------+---------------------------------------+---------------------------------+
|
+----------------------------+---------------------------------------+---------------------------------+
|
||||||
| rdp.log | RDP | :bro:type:`RDP::Info` |
|
| rdp.log | RDP | :bro:type:`RDP::Info` |
|
||||||
+----------------------------+---------------------------------------+---------------------------------+
|
+----------------------------+---------------------------------------+---------------------------------+
|
||||||
|
| rfb.log | Remote Framebuffer (RFB) | :bro:type:`RFB::Info` |
|
||||||
|
+----------------------------+---------------------------------------+---------------------------------+
|
||||||
| sip.log | SIP | :bro:type:`SIP::Info` |
|
| sip.log | SIP | :bro:type:`SIP::Info` |
|
||||||
+----------------------------+---------------------------------------+---------------------------------+
|
+----------------------------+---------------------------------------+---------------------------------+
|
||||||
| smtp.log | SMTP transactions | :bro:type:`SMTP::Info` |
|
| smtp.log | SMTP transactions | :bro:type:`SMTP::Info` |
|
||||||
|
|
|
@ -6,6 +6,7 @@ module X509;
|
||||||
export {
|
export {
|
||||||
redef enum Log::ID += { LOG };
|
redef enum Log::ID += { LOG };
|
||||||
|
|
||||||
|
## The record type which contains the fields of the X.509 log.
|
||||||
type Info: record {
|
type Info: record {
|
||||||
## Current timestamp.
|
## Current timestamp.
|
||||||
ts: time &log;
|
ts: time &log;
|
||||||
|
|
|
@ -68,7 +68,7 @@ export {
|
||||||
## Events raised by TimeMachine instances and handled by workers.
|
## Events raised by TimeMachine instances and handled by workers.
|
||||||
const tm2worker_events = /EMPTY/ &redef;
|
const tm2worker_events = /EMPTY/ &redef;
|
||||||
|
|
||||||
## Events sent by the control host (i.e. BroControl) when dynamically
|
## Events sent by the control host (i.e., BroControl) when dynamically
|
||||||
## connecting to a running instance to update settings or request data.
|
## connecting to a running instance to update settings or request data.
|
||||||
const control_events = Control::controller_events &redef;
|
const control_events = Control::controller_events &redef;
|
||||||
|
|
||||||
|
|
|
@ -23,20 +23,20 @@ export {
|
||||||
# ### Generic functions and events.
|
# ### Generic functions and events.
|
||||||
# ###
|
# ###
|
||||||
|
|
||||||
# Activates a plugin.
|
## Activates a plugin.
|
||||||
#
|
##
|
||||||
# p: The plugin to acticate.
|
## p: The plugin to acticate.
|
||||||
#
|
##
|
||||||
# priority: The higher the priority, the earlier this plugin will be checked
|
## priority: The higher the priority, the earlier this plugin will be checked
|
||||||
# whether it supports an operation, relative to other plugins.
|
## whether it supports an operation, relative to other plugins.
|
||||||
global activate: function(p: PluginState, priority: int);
|
global activate: function(p: PluginState, priority: int);
|
||||||
|
|
||||||
# Event that is used to initialize plugins. Place all plugin initialization
|
## Event that is used to initialize plugins. Place all plugin initialization
|
||||||
# related functionality in this event.
|
## related functionality in this event.
|
||||||
global NetControl::init: event();
|
global NetControl::init: event();
|
||||||
|
|
||||||
# Event that is raised once all plugins activated in ``NetControl::init`` have finished
|
## Event that is raised once all plugins activated in ``NetControl::init``
|
||||||
# their initialization.
|
## have finished their initialization.
|
||||||
global NetControl::init_done: event();
|
global NetControl::init_done: event();
|
||||||
|
|
||||||
# ###
|
# ###
|
||||||
|
|
|
@ -44,6 +44,7 @@ export {
|
||||||
ACTION_ALARM,
|
ACTION_ALARM,
|
||||||
};
|
};
|
||||||
|
|
||||||
|
## Type that represents a set of actions.
|
||||||
type ActionSet: set[Notice::Action];
|
type ActionSet: set[Notice::Action];
|
||||||
|
|
||||||
## The notice framework is able to do automatic notice suppression by
|
## The notice framework is able to do automatic notice suppression by
|
||||||
|
@ -52,6 +53,7 @@ export {
|
||||||
## suppression.
|
## suppression.
|
||||||
const default_suppression_interval = 1hrs &redef;
|
const default_suppression_interval = 1hrs &redef;
|
||||||
|
|
||||||
|
## The record type that is used for representing and logging notices.
|
||||||
type Info: record {
|
type Info: record {
|
||||||
## An absolute time indicating when the notice occurred,
|
## An absolute time indicating when the notice occurred,
|
||||||
## defaults to the current network time.
|
## defaults to the current network time.
|
||||||
|
|
|
@ -21,6 +21,7 @@ export {
|
||||||
## not.
|
## not.
|
||||||
const default_capture_password = F &redef;
|
const default_capture_password = F &redef;
|
||||||
|
|
||||||
|
## The record type which contains the fields of the HTTP log.
|
||||||
type Info: record {
|
type Info: record {
|
||||||
## Timestamp for when the request happened.
|
## Timestamp for when the request happened.
|
||||||
ts: time &log;
|
ts: time &log;
|
||||||
|
|
|
@ -3,6 +3,7 @@ module RFB;
|
||||||
export {
|
export {
|
||||||
redef enum Log::ID += { LOG };
|
redef enum Log::ID += { LOG };
|
||||||
|
|
||||||
|
## The record type which contains the fields of the RFB log.
|
||||||
type Info: record {
|
type Info: record {
|
||||||
## Timestamp for when the event happened.
|
## Timestamp for when the event happened.
|
||||||
ts: time &log;
|
ts: time &log;
|
||||||
|
|
|
@ -10,6 +10,7 @@ module SIP;
|
||||||
export {
|
export {
|
||||||
redef enum Log::ID += { LOG };
|
redef enum Log::ID += { LOG };
|
||||||
|
|
||||||
|
## The record type which contains the fields of the SIP log.
|
||||||
type Info: record {
|
type Info: record {
|
||||||
## Timestamp for when the request happened.
|
## Timestamp for when the request happened.
|
||||||
ts: time &log;
|
ts: time &log;
|
||||||
|
|
|
@ -7,6 +7,7 @@ module SMTP;
|
||||||
export {
|
export {
|
||||||
redef enum Log::ID += { LOG };
|
redef enum Log::ID += { LOG };
|
||||||
|
|
||||||
|
## The record type which contains the fields of the SMTP log.
|
||||||
type Info: record {
|
type Info: record {
|
||||||
## Time when the message was first seen.
|
## Time when the message was first seen.
|
||||||
ts: time &log;
|
ts: time &log;
|
||||||
|
|
|
@ -6,6 +6,7 @@ module SOCKS;
|
||||||
export {
|
export {
|
||||||
redef enum Log::ID += { LOG };
|
redef enum Log::ID += { LOG };
|
||||||
|
|
||||||
|
## The record type which contains the fields of the SOCKS log.
|
||||||
type Info: record {
|
type Info: record {
|
||||||
## Time when the proxy connection was first detected.
|
## Time when the proxy connection was first detected.
|
||||||
ts: time &log;
|
ts: time &log;
|
||||||
|
|
|
@ -8,6 +8,7 @@ export {
|
||||||
## The SSH protocol logging stream identifier.
|
## The SSH protocol logging stream identifier.
|
||||||
redef enum Log::ID += { LOG };
|
redef enum Log::ID += { LOG };
|
||||||
|
|
||||||
|
## The record type which contains the fields of the SSH log.
|
||||||
type Info: record {
|
type Info: record {
|
||||||
## Time when the SSH connection began.
|
## Time when the SSH connection began.
|
||||||
ts: time &log;
|
ts: time &log;
|
||||||
|
|
|
@ -8,6 +8,7 @@ module SSL;
|
||||||
export {
|
export {
|
||||||
redef enum Log::ID += { LOG };
|
redef enum Log::ID += { LOG };
|
||||||
|
|
||||||
|
## The record type which contains the fields of the SSL log.
|
||||||
type Info: record {
|
type Info: record {
|
||||||
## Time when the SSL connection was first detected.
|
## Time when the SSL connection was first detected.
|
||||||
ts: time &log;
|
ts: time &log;
|
||||||
|
|
|
@ -7,7 +7,8 @@ module Syslog;
|
||||||
|
|
||||||
export {
|
export {
|
||||||
redef enum Log::ID += { LOG };
|
redef enum Log::ID += { LOG };
|
||||||
|
|
||||||
|
## The record type which contains the fields of the syslog log.
|
||||||
type Info: record {
|
type Info: record {
|
||||||
## Timestamp when the syslog message was seen.
|
## Timestamp when the syslog message was seen.
|
||||||
ts: time &log;
|
ts: time &log;
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue