mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
Remove script functions marked as unused (6.1 deprecations)
This commit is contained in:
parent
4229af6820
commit
7a867d52e2
8 changed files with 4 additions and 96 deletions
|
@ -584,15 +584,6 @@ function is_being_suppressed(n: Notice::Info): bool
|
||||||
return F;
|
return F;
|
||||||
}
|
}
|
||||||
|
|
||||||
# Executes a script with all of the notice fields put into the
|
|
||||||
# new process' environment as "ZEEK_ARG_<field>" variables.
|
|
||||||
function execute_with_notice(cmd: string, n: Notice::Info) &deprecated="Remove in v6.1. Usage testing indicates this function is unused."
|
|
||||||
{
|
|
||||||
# TODO: fix system calls
|
|
||||||
#local tgs = tags(n);
|
|
||||||
#system_env(cmd, tags);
|
|
||||||
}
|
|
||||||
|
|
||||||
function create_file_info(f: fa_file): Notice::FileInfo
|
function create_file_info(f: fa_file): Notice::FileInfo
|
||||||
{
|
{
|
||||||
local fi: Notice::FileInfo = Notice::FileInfo($fuid = f$id,
|
local fi: Notice::FileInfo = Notice::FileInfo($fuid = f$id,
|
||||||
|
|
|
@ -148,13 +148,6 @@ event zeek_init() &priority=5
|
||||||
Log::create_stream(Signatures::LOG, [$columns=Info, $ev=log_signature, $path="signatures", $policy=log_policy]);
|
Log::create_stream(Signatures::LOG, [$columns=Info, $ev=log_signature, $path="signatures", $policy=log_policy]);
|
||||||
}
|
}
|
||||||
|
|
||||||
# Returns true if the given signature has already been triggered for the given
|
|
||||||
# [orig, resp] pair.
|
|
||||||
function has_signature_matched(id: string, orig: addr, resp: addr): bool &deprecated="Remove in v6.1. Usage testing indicates this function is unused."
|
|
||||||
{
|
|
||||||
return [orig, resp] in vert_table ? id in vert_table[orig, resp] : F;
|
|
||||||
}
|
|
||||||
|
|
||||||
event sig_summary(orig: addr, id: string, msg: string)
|
event sig_summary(orig: addr, id: string, msg: string)
|
||||||
{
|
{
|
||||||
NOTICE([$note=Signature_Summary, $src=orig,
|
NOTICE([$note=Signature_Summary, $src=orig,
|
||||||
|
|
|
@ -454,11 +454,6 @@ function cmp_versions(v1: Version, v2: Version): int
|
||||||
return 0;
|
return 0;
|
||||||
}
|
}
|
||||||
|
|
||||||
function software_endpoint_name(id: conn_id, host: addr): string &deprecated="Remove in v6.1. Usage testing indicates this function is unused."
|
|
||||||
{
|
|
||||||
return fmt("%s %s", host, (host == id$orig_h ? "client" : "server"));
|
|
||||||
}
|
|
||||||
|
|
||||||
# Convert a version into a string "a.b.c-x". Marked "&is_used" because
|
# Convert a version into a string "a.b.c-x". Marked "&is_used" because
|
||||||
# while the base scripts don't call it, the optional policy/ scripts do.
|
# while the base scripts don't call it, the optional policy/ scripts do.
|
||||||
function software_fmt_version(v: Version): string &is_used
|
function software_fmt_version(v: Version): string &is_used
|
||||||
|
|
|
@ -71,18 +71,6 @@ function data_added(ss: SumStat, key: Key, result: Result)
|
||||||
threshold_crossed(ss, key, result);
|
threshold_crossed(ss, key, result);
|
||||||
}
|
}
|
||||||
|
|
||||||
function request(ss_name: string): ResultTable &deprecated="Remove in v6.1. Usage testing indicates this function is unused."
|
|
||||||
{
|
|
||||||
# This only needs to be implemented this way for cluster compatibility.
|
|
||||||
return when [ss_name] ( T )
|
|
||||||
{
|
|
||||||
if ( ss_name in result_store )
|
|
||||||
return result_store[ss_name];
|
|
||||||
else
|
|
||||||
return table();
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
function request_key(ss_name: string, key: Key): Result
|
function request_key(ss_name: string, key: Key): Result
|
||||||
{
|
{
|
||||||
# This only needs to be implemented this way for cluster compatibility.
|
# This only needs to be implemented this way for cluster compatibility.
|
||||||
|
|
|
@ -23,11 +23,6 @@ function calc_std_dev(rv: ResultVal)
|
||||||
rv$std_dev = sqrt(rv$variance);
|
rv$std_dev = sqrt(rv$variance);
|
||||||
}
|
}
|
||||||
|
|
||||||
hook std_dev_hook(r: Reducer, val: double, obs: Observation, rv: ResultVal) &deprecated="Remove in v6.1. Usage testing indicates this function is unused."
|
|
||||||
{
|
|
||||||
calc_std_dev(rv);
|
|
||||||
}
|
|
||||||
|
|
||||||
hook register_observe_plugins() &priority=-10
|
hook register_observe_plugins() &priority=-10
|
||||||
{
|
{
|
||||||
register_observe_plugin(STD_DEV, function(r: Reducer, val: double, obs: Observation, rv: ResultVal)
|
register_observe_plugin(STD_DEV, function(r: Reducer, val: double, obs: Observation, rv: ResultVal)
|
||||||
|
|
|
@ -135,10 +135,3 @@ function remove_pending_cmd(pc: PendingCmds, ca: CmdArg): bool
|
||||||
else
|
else
|
||||||
return F;
|
return F;
|
||||||
}
|
}
|
||||||
|
|
||||||
function pop_pending_cmd(pc: PendingCmds, reply_code: count, reply_msg: string): CmdArg &deprecated="Remove in v6.1. Usage testing indicates this function is unused."
|
|
||||||
{
|
|
||||||
local ca = get_pending_cmd(pc, reply_code, reply_msg);
|
|
||||||
remove_pending_cmd(pc, ca);
|
|
||||||
return ca;
|
|
||||||
}
|
|
||||||
|
|
|
@ -182,7 +182,7 @@ const attr_types: table[count] of string = {
|
||||||
[171] = "Delegated-IPv6-Prefix-Pool",
|
[171] = "Delegated-IPv6-Prefix-Pool",
|
||||||
[172] = "Stateful-IPv6-Address-Pool",
|
[172] = "Stateful-IPv6-Address-Pool",
|
||||||
[173] = "IPv6-6rd-Configuration"
|
[173] = "IPv6-6rd-Configuration"
|
||||||
} &default=function(i: count): string { return fmt("unknown-%d", i); } &deprecated="Remove in v6.1. Usage testing indicates this function is unused.";
|
} &default=function(i: count): string { return fmt("unknown-%d", i); } &is_used;
|
||||||
|
|
||||||
const nas_port_types: table[count] of string = {
|
const nas_port_types: table[count] of string = {
|
||||||
[0] = "Async",
|
[0] = "Async",
|
||||||
|
@ -205,7 +205,7 @@ const nas_port_types: table[count] of string = {
|
||||||
[17] = "Cable",
|
[17] = "Cable",
|
||||||
[18] = "Wireless - Other",
|
[18] = "Wireless - Other",
|
||||||
[19] = "Wireless - IEEE 802.11"
|
[19] = "Wireless - IEEE 802.11"
|
||||||
} &default=function(i: count): string { return fmt("unknown-%d", i); } &deprecated="Remove in v6.1. Usage testing indicates this function is unused.";
|
} &default=function(i: count): string { return fmt("unknown-%d", i); } &is_used;
|
||||||
|
|
||||||
const service_types: table[count] of string = {
|
const service_types: table[count] of string = {
|
||||||
[1] = "Login",
|
[1] = "Login",
|
||||||
|
@ -219,7 +219,7 @@ const service_types: table[count] of string = {
|
||||||
[9] = "Callback NAS Prompt",
|
[9] = "Callback NAS Prompt",
|
||||||
[10] = "Call Check",
|
[10] = "Call Check",
|
||||||
[11] = "Callback Administrative",
|
[11] = "Callback Administrative",
|
||||||
} &default=function(i: count): string { return fmt("unknown-%d", i); } &deprecated="Remove in v6.1. Usage testing indicates this function is unused.";
|
} &default=function(i: count): string { return fmt("unknown-%d", i); } &is_used;
|
||||||
|
|
||||||
const framed_protocol_types: table[count] of string = {
|
const framed_protocol_types: table[count] of string = {
|
||||||
[1] = "PPP",
|
[1] = "PPP",
|
||||||
|
@ -228,4 +228,4 @@ const framed_protocol_types: table[count] of string = {
|
||||||
[4] = "Gandalf proprietary SingleLink/MultiLink protocol",
|
[4] = "Gandalf proprietary SingleLink/MultiLink protocol",
|
||||||
[5] = "Xylogics proprietary IPX/SLIP",
|
[5] = "Xylogics proprietary IPX/SLIP",
|
||||||
[6] = "X.75 Synchronous"
|
[6] = "X.75 Synchronous"
|
||||||
} &default=function(i: count): string { return fmt("unknown-%d", i); } &deprecated="Remove in v6.1. Usage testing indicates this function is unused.";
|
} &default=function(i: count): string { return fmt("unknown-%d", i); } &is_used;
|
||||||
|
|
|
@ -274,50 +274,3 @@ event smb1_write_andx_request(c: connection, hdr: SMB1::Header, file_id: count,
|
||||||
|
|
||||||
c$smb_state$pipe_map[file_id] = c$smb_state$current_file$uuid;
|
c$smb_state$pipe_map[file_id] = c$smb_state$current_file$uuid;
|
||||||
}
|
}
|
||||||
|
|
||||||
event smb_pipe_bind_ack_response(c: connection, hdr: SMB1::Header) &deprecated="Remove in v6.1. Usage testing indicates this function is unused."
|
|
||||||
{
|
|
||||||
if ( ! c$smb_state?$current_file || ! c$smb_state$current_file?$uuid )
|
|
||||||
{
|
|
||||||
# TODO: figure out why the uuid isn't getting set sometimes.
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
c$smb_state$current_cmd$sub_command = "RPC_BIND_ACK";
|
|
||||||
c$smb_state$current_cmd$argument = SMB::rpc_uuids[c$smb_state$current_file$uuid];
|
|
||||||
}
|
|
||||||
|
|
||||||
event smb_pipe_bind_request(c: connection, hdr: SMB1::Header, uuid: string, version: string) &deprecated="Remove in v6.1. Usage testing indicates this function is unused."
|
|
||||||
{
|
|
||||||
if ( ! c$smb_state?$current_file || ! c$smb_state$current_file?$uuid )
|
|
||||||
{
|
|
||||||
# TODO: figure out why the current_file isn't getting set sometimes.
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
c$smb_state$current_cmd$sub_command = "RPC_BIND";
|
|
||||||
c$smb_state$current_file$uuid = uuid;
|
|
||||||
c$smb_state$current_cmd$argument = fmt("%s v%s", SMB::rpc_uuids[uuid], version);
|
|
||||||
}
|
|
||||||
|
|
||||||
event smb_pipe_request(c: connection, hdr: SMB1::Header, op_num: count) &deprecated="Remove in v6.1. Usage testing indicates this function is unused."
|
|
||||||
{
|
|
||||||
if ( ! c$smb_state?$current_file )
|
|
||||||
{
|
|
||||||
# TODO: figure out why the current file isn't being set sometimes.
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
local f = c$smb_state$current_file;
|
|
||||||
if ( ! f?$uuid )
|
|
||||||
{
|
|
||||||
# TODO: figure out why this is happening.
|
|
||||||
Reporter::conn_weird("smb_pipe_request_missing_uuid", c, "");
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
local arg = fmt("%s: %s",
|
|
||||||
SMB::rpc_uuids[f$uuid],
|
|
||||||
SMB::rpc_sub_cmds[f$uuid][op_num]);
|
|
||||||
|
|
||||||
c$smb_state$current_cmd$argument = arg;
|
|
||||||
}
|
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue