Add some missing Bro script documentation

Also fixed a few reST formatting issues.
This commit is contained in:
Daniel Thayer 2016-05-05 16:35:31 -05:00
parent 28125e367e
commit 2d9127888f
13 changed files with 25 additions and 12 deletions

View file

@ -39,6 +39,8 @@ Network Protocols
+----------------------------+---------------------------------------+---------------------------------+ +----------------------------+---------------------------------------+---------------------------------+
| rdp.log | RDP | :bro:type:`RDP::Info` | | rdp.log | RDP | :bro:type:`RDP::Info` |
+----------------------------+---------------------------------------+---------------------------------+ +----------------------------+---------------------------------------+---------------------------------+
| rfb.log | Remote Framebuffer (RFB) | :bro:type:`RFB::Info` |
+----------------------------+---------------------------------------+---------------------------------+
| sip.log | SIP | :bro:type:`SIP::Info` | | sip.log | SIP | :bro:type:`SIP::Info` |
+----------------------------+---------------------------------------+---------------------------------+ +----------------------------+---------------------------------------+---------------------------------+
| smtp.log | SMTP transactions | :bro:type:`SMTP::Info` | | smtp.log | SMTP transactions | :bro:type:`SMTP::Info` |

View file

@ -6,6 +6,7 @@ module X509;
export { export {
redef enum Log::ID += { LOG }; redef enum Log::ID += { LOG };
## The record type which contains the fields of the X.509 log.
type Info: record { type Info: record {
## Current timestamp. ## Current timestamp.
ts: time &log; ts: time &log;

View file

@ -68,7 +68,7 @@ export {
## Events raised by TimeMachine instances and handled by workers. ## Events raised by TimeMachine instances and handled by workers.
const tm2worker_events = /EMPTY/ &redef; const tm2worker_events = /EMPTY/ &redef;
## Events sent by the control host (i.e. BroControl) when dynamically ## Events sent by the control host (i.e., BroControl) when dynamically
## connecting to a running instance to update settings or request data. ## connecting to a running instance to update settings or request data.
const control_events = Control::controller_events &redef; const control_events = Control::controller_events &redef;

View file

@ -23,20 +23,20 @@ export {
# ### Generic functions and events. # ### Generic functions and events.
# ### # ###
# Activates a plugin. ## Activates a plugin.
# ##
# p: The plugin to acticate. ## p: The plugin to acticate.
# ##
# priority: The higher the priority, the earlier this plugin will be checked ## priority: The higher the priority, the earlier this plugin will be checked
# whether it supports an operation, relative to other plugins. ## whether it supports an operation, relative to other plugins.
global activate: function(p: PluginState, priority: int); global activate: function(p: PluginState, priority: int);
# Event that is used to initialize plugins. Place all plugin initialization ## Event that is used to initialize plugins. Place all plugin initialization
# related functionality in this event. ## related functionality in this event.
global NetControl::init: event(); global NetControl::init: event();
# Event that is raised once all plugins activated in ``NetControl::init`` have finished ## Event that is raised once all plugins activated in ``NetControl::init``
# their initialization. ## have finished their initialization.
global NetControl::init_done: event(); global NetControl::init_done: event();
# ### # ###

View file

@ -44,6 +44,7 @@ export {
ACTION_ALARM, ACTION_ALARM,
}; };
## Type that represents a set of actions.
type ActionSet: set[Notice::Action]; type ActionSet: set[Notice::Action];
## The notice framework is able to do automatic notice suppression by ## The notice framework is able to do automatic notice suppression by
@ -52,6 +53,7 @@ export {
## suppression. ## suppression.
const default_suppression_interval = 1hrs &redef; const default_suppression_interval = 1hrs &redef;
## The record type that is used for representing and logging notices.
type Info: record { type Info: record {
## An absolute time indicating when the notice occurred, ## An absolute time indicating when the notice occurred,
## defaults to the current network time. ## defaults to the current network time.

View file

@ -21,6 +21,7 @@ export {
## not. ## not.
const default_capture_password = F &redef; const default_capture_password = F &redef;
## The record type which contains the fields of the HTTP log.
type Info: record { type Info: record {
## Timestamp for when the request happened. ## Timestamp for when the request happened.
ts: time &log; ts: time &log;

View file

@ -3,6 +3,7 @@ module RFB;
export { export {
redef enum Log::ID += { LOG }; redef enum Log::ID += { LOG };
## The record type which contains the fields of the RFB log.
type Info: record { type Info: record {
## Timestamp for when the event happened. ## Timestamp for when the event happened.
ts: time &log; ts: time &log;

View file

@ -10,6 +10,7 @@ module SIP;
export { export {
redef enum Log::ID += { LOG }; redef enum Log::ID += { LOG };
## The record type which contains the fields of the SIP log.
type Info: record { type Info: record {
## Timestamp for when the request happened. ## Timestamp for when the request happened.
ts: time &log; ts: time &log;

View file

@ -7,6 +7,7 @@ module SMTP;
export { export {
redef enum Log::ID += { LOG }; redef enum Log::ID += { LOG };
## The record type which contains the fields of the SMTP log.
type Info: record { type Info: record {
## Time when the message was first seen. ## Time when the message was first seen.
ts: time &log; ts: time &log;

View file

@ -6,6 +6,7 @@ module SOCKS;
export { export {
redef enum Log::ID += { LOG }; redef enum Log::ID += { LOG };
## The record type which contains the fields of the SOCKS log.
type Info: record { type Info: record {
## Time when the proxy connection was first detected. ## Time when the proxy connection was first detected.
ts: time &log; ts: time &log;

View file

@ -8,6 +8,7 @@ export {
## The SSH protocol logging stream identifier. ## The SSH protocol logging stream identifier.
redef enum Log::ID += { LOG }; redef enum Log::ID += { LOG };
## The record type which contains the fields of the SSH log.
type Info: record { type Info: record {
## Time when the SSH connection began. ## Time when the SSH connection began.
ts: time &log; ts: time &log;

View file

@ -8,6 +8,7 @@ module SSL;
export { export {
redef enum Log::ID += { LOG }; redef enum Log::ID += { LOG };
## The record type which contains the fields of the SSL log.
type Info: record { type Info: record {
## Time when the SSL connection was first detected. ## Time when the SSL connection was first detected.
ts: time &log; ts: time &log;

View file

@ -7,7 +7,8 @@ module Syslog;
export { export {
redef enum Log::ID += { LOG }; redef enum Log::ID += { LOG };
## The record type which contains the fields of the syslog log.
type Info: record { type Info: record {
## Timestamp when the syslog message was seen. ## Timestamp when the syslog message was seen.
ts: time &log; ts: time &log;