Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge remote-tracking branch 'origin/topic/seth/zeek_init'

Browse source 
* origin/topic/seth/zeek_init:
  Some more testing fixes.
  Update docs and tests for bro_(init|done) -> zeek_(init|done)
  Implement the zeek_init handler.
This commit is contained in:
Jon Siwek 2019-04-19 11:16:35 -07:00
commit a994be9eeb
628 changed files with 868 additions and 1082 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/base/frameworks/intel/cluster.zeek
View file

@ -16,7 +16,7 @@ redef have_full_data = F;
@endif
@if ( Cluster::local_node_type() == Cluster::MANAGER )
event bro_init()
event zeek_init()
{
Broker::auto_publish(Cluster::worker_topic, remove_indicator);
}
@ -67,7 +67,7 @@ event Intel::match_remote(s: Seen) &priority=5
@endif
@if ( Cluster::local_node_type() == Cluster::WORKER )
event bro_init()
event zeek_init()
{
Broker::auto_publish(Cluster::manager_topic, match_remote);
Broker::auto_publish(Cluster::manager_topic, remove_item);

2
scripts/base/frameworks/intel/input.zeek
View file

@ -27,7 +27,7 @@ event Intel::read_entry(desc: Input::EventDescription, tpe: Input::Event, item:
Intel::insert(item);
}
event bro_init() &priority=5
event zeek_init() &priority=5
{
if ( ! Cluster::is_enabled() ||
Cluster::local_node_type() == Cluster::MANAGER )

2
scripts/base/frameworks/intel/main.zeek
View file

@ -223,7 +223,7 @@ type MinDataStore: record {
global min_data_store: MinDataStore &redef;
event bro_init() &priority=5
event zeek_init() &priority=5
{
Log::create_stream(LOG, [$columns=Info, $ev=log_intel, $path="intel"]);
}