Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-12 19:48:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Use consistent zeek_init priority for Log::create_stream calls

Browse source 
Typically in base scripts, Log::create_stream() is called in zeek_init()
handler with &priority=5 such that it will have already been created
in the default zeek_init() &priority=0.
This commit is contained in:
Jon Siwek 2020-01-22 13:58:20 -08:00
parent 270702cacb
commit 7a748526c0
3 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/base/frameworks/signatures/main.zeek
View file

@ -140,7 +140,7 @@ global count_per_orig: table[addr, string] of count
global did_sig_log: set[string] &read_expire = 1 hr; global did_sig_log: set[string] &read_expire = 1 hr;
event zeek_init() event zeek_init() &priority=5
{ {
Log::create_stream(Signatures::LOG, [$columns=Info, $ev=log_signature, $path="signatures"]); Log::create_stream(Signatures::LOG, [$columns=Info, $ev=log_signature, $path="signatures"]);
} }

2
scripts/policy/files/x509/log-ocsp.zeek
View file

@ -39,7 +39,7 @@ export {
global log_ocsp: event(rec: Info); global log_ocsp: event(rec: Info);
} }
event zeek_init() event zeek_init() &priority=5
{ {
Log::create_stream(LOG, [$columns=Info, $ev=log_ocsp, $path="ocsp"]); Log::create_stream(LOG, [$columns=Info, $ev=log_ocsp, $path="ocsp"]);
Files::register_for_mime_type(Files::ANALYZER_OCSP_REPLY, "application/ocsp-response"); Files::register_for_mime_type(Files::ANALYZER_OCSP_REPLY, "application/ocsp-response");

2
scripts/policy/protocols/conn/known-hosts.zeek
View file

@ -145,7 +145,7 @@ event Known::host_found(info: HostsInfo)
event known_host_add(info); event known_host_add(info);
} }
event zeek_init() event zeek_init() &priority=5
{ {
Log::create_stream(Known::HOSTS_LOG, [$columns=HostsInfo, $ev=log_known_hosts, $path="known_hosts"]); Log::create_stream(Known::HOSTS_LOG, [$columns=HostsInfo, $ev=log_known_hosts, $path="known_hosts"]);
} }