GH-323: change builtin plugin namespaces to Zeek

This commit is contained in:
Jon Siwek 2019-06-07 20:55:03 -07:00
parent e0f9b0829e
commit 5331bf10ec
148 changed files with 830 additions and 827 deletions

View file

@ -3,6 +3,6 @@ include(ZeekPlugin)
include_directories(BEFORE ${CMAKE_CURRENT_SOURCE_DIR}
${CMAKE_CURRENT_BINARY_DIR})
zeek_plugin_begin(Bro FileDataEvent)
zeek_plugin_begin(Zeek FileDataEvent)
zeek_plugin_cc(DataEvent.cc Plugin.cc ../../Analyzer.cc)
zeek_plugin_end()

View file

@ -5,7 +5,7 @@
#include "DataEvent.h"
namespace plugin {
namespace Bro_FileDataEvent {
namespace Zeek_FileDataEvent {
class Plugin : public plugin::Plugin {
public:
@ -14,7 +14,7 @@ public:
AddComponent(new ::file_analysis::Component("DATA_EVENT", ::file_analysis::DataEvent::Instantiate));
plugin::Configuration config;
config.name = "Bro::FileDataEvent";
config.name = "Zeek::FileDataEvent";
config.description = "Delivers file content";
return config;
}

View file

@ -3,7 +3,7 @@ include(ZeekPlugin)
include_directories(BEFORE ${CMAKE_CURRENT_SOURCE_DIR}
${CMAKE_CURRENT_BINARY_DIR})
zeek_plugin_begin(Bro FileEntropy)
zeek_plugin_begin(Zeek FileEntropy)
zeek_plugin_cc(Entropy.cc Plugin.cc ../../Analyzer.cc)
zeek_plugin_bif(events.bif)
zeek_plugin_end()

View file

@ -5,7 +5,7 @@
#include "Entropy.h"
namespace plugin {
namespace Bro_FileEntropy {
namespace Zeek_FileEntropy {
class Plugin : public plugin::Plugin {
public:
@ -14,7 +14,7 @@ public:
AddComponent(new ::file_analysis::Component("ENTROPY", ::file_analysis::Entropy::Instantiate));
plugin::Configuration config;
config.name = "Bro::FileEntropy";
config.name = "Zeek::FileEntropy";
config.description = "Entropy test file content";
return config;
}

View file

@ -3,7 +3,7 @@ include(ZeekPlugin)
include_directories(BEFORE ${CMAKE_CURRENT_SOURCE_DIR}
${CMAKE_CURRENT_BINARY_DIR})
zeek_plugin_begin(Bro FileExtract)
zeek_plugin_begin(Zeek FileExtract)
zeek_plugin_cc(Extract.cc Plugin.cc ../../Analyzer.cc)
zeek_plugin_bif(events.bif)
zeek_plugin_bif(functions.bif)

View file

@ -5,7 +5,7 @@
#include "Extract.h"
namespace plugin {
namespace Bro_FileExtract {
namespace Zeek_FileExtract {
class Plugin : public plugin::Plugin {
public:
@ -14,7 +14,7 @@ public:
AddComponent(new ::file_analysis::Component("EXTRACT", ::file_analysis::Extract::Instantiate));
plugin::Configuration config;
config.name = "Bro::FileExtract";
config.name = "Zeek::FileExtract";
config.description = "Extract file content";
return config;
}

View file

@ -3,7 +3,7 @@ include(ZeekPlugin)
include_directories(BEFORE ${CMAKE_CURRENT_SOURCE_DIR}
${CMAKE_CURRENT_BINARY_DIR})
zeek_plugin_begin(Bro FileHash)
zeek_plugin_begin(Zeek FileHash)
zeek_plugin_cc(Hash.cc Plugin.cc ../../Analyzer.cc)
zeek_plugin_bif(events.bif)
zeek_plugin_end()

View file

@ -5,7 +5,7 @@
#include "Hash.h"
namespace plugin {
namespace Bro_FileHash {
namespace Zeek_FileHash {
class Plugin : public plugin::Plugin {
public:
@ -16,7 +16,7 @@ public:
AddComponent(new ::file_analysis::Component("SHA256", ::file_analysis::SHA256::Instantiate));
plugin::Configuration config;
config.name = "Bro::FileHash";
config.name = "Zeek::FileHash";
config.description = "Hash file content";
return config;
}

View file

@ -3,7 +3,7 @@ include(ZeekPlugin)
include_directories(BEFORE ${CMAKE_CURRENT_SOURCE_DIR}
${CMAKE_CURRENT_BINARY_DIR})
zeek_plugin_begin(Bro PE)
zeek_plugin_begin(Zeek PE)
zeek_plugin_cc(PE.cc Plugin.cc)
zeek_plugin_bif(events.bif)
zeek_plugin_pac(

View file

@ -5,7 +5,7 @@
#include "PE.h"
namespace plugin {
namespace Bro_PE {
namespace Zeek_PE {
class Plugin : public plugin::Plugin {
public:
@ -14,7 +14,7 @@ public:
AddComponent(new ::file_analysis::Component("PE", ::file_analysis::PE::Instantiate));
plugin::Configuration config;
config.name = "Bro::PE";
config.name = "Zeek::PE";
config.description = "Portable Executable analyzer";
return config;
}

View file

@ -4,7 +4,7 @@ include(ZeekPlugin)
include_directories(BEFORE ${CMAKE_CURRENT_SOURCE_DIR}
${CMAKE_CURRENT_BINARY_DIR})
zeek_plugin_begin(Bro Unified2)
zeek_plugin_begin(Zeek Unified2)
zeek_plugin_cc(Unified2.cc Plugin.cc ../../Analyzer.cc)
zeek_plugin_bif(events.bif types.bif)
zeek_plugin_pac(unified2.pac unified2-file.pac unified2-analyzer.pac)

View file

@ -7,7 +7,7 @@
#include "Unified2.h"
namespace plugin {
namespace Bro_Unified2 {
namespace Zeek_Unified2 {
class Plugin : public plugin::Plugin {
public:
@ -16,7 +16,7 @@ public:
AddComponent(new ::file_analysis::Component("UNIFIED2", ::file_analysis::Unified2::Instantiate));
plugin::Configuration config;
config.name = "Bro::Unified2";
config.name = "Zeek::Unified2";
config.description = "Analyze Unified2 alert files.";
return config;
}

View file

@ -4,7 +4,7 @@ include(ZeekPlugin)
include_directories(BEFORE ${CMAKE_CURRENT_SOURCE_DIR}
${CMAKE_CURRENT_BINARY_DIR})
zeek_plugin_begin(Bro X509)
zeek_plugin_begin(Zeek X509)
zeek_plugin_cc(X509Common.cc X509.cc OCSP.cc Plugin.cc)
zeek_plugin_bif(events.bif types.bif functions.bif ocsp_events.bif)
zeek_plugin_pac(x509-extension.pac x509-signed_certificate_timestamp.pac)

View file

@ -7,7 +7,7 @@
#include "OCSP.h"
namespace plugin {
namespace Bro_X509 {
namespace Zeek_X509 {
class Plugin : public plugin::Plugin {
public:
@ -18,7 +18,7 @@ public:
AddComponent(new ::file_analysis::Component("OCSP_REPLY", ::file_analysis::OCSP::InstantiateReply));
plugin::Configuration config;
config.name = "Bro::X509";
config.name = "Zeek::X509";
config.description = "X509 and OCSP analyzer";
return config;
}