Merge remote-tracking branch 'origin/topic/seth/zeek_init'

* origin/topic/seth/zeek_init:
  Some more testing fixes.
  Update docs and tests for bro_(init|done) -> zeek_(init|done)
  Implement the zeek_init handler.
This commit is contained in:
Jon Siwek 2019-04-19 11:16:35 -07:00
commit a994be9eeb
628 changed files with 868 additions and 1082 deletions

View file

@ -6,7 +6,7 @@
redef Analyzer::disabled_analyzers += { Analyzer::ANALYZER_SSH };
event bro_init()
event zeek_init()
{
Analyzer::disable_analyzer(Analyzer::ANALYZER_DNS);
}

View file

@ -5,7 +5,7 @@
redef Analyzer::disable_all = T;
event bro_init()
event zeek_init()
{
Analyzer::enable_analyzer(Analyzer::ANALYZER_DNS);
}

View file

@ -5,7 +5,7 @@
# @TEST-EXEC: bro -r ${TRACES}/ssh/ssh-on-port-80.trace dpd_buffer_size=0;
# @TEST-EXEC: cat conn.log | bro-cut service | grep -vq ssh
event bro_init()
event zeek_init()
{
Analyzer::register_for_port(Analyzer::ANALYZER_SSH, 80/tcp);
}