diff --git a/doc/install/install.rst b/doc/install/install.rst index cdea7d9fac..dee3ba0d0c 100644 --- a/doc/install/install.rst +++ b/doc/install/install.rst @@ -117,7 +117,7 @@ Optional Dependencies Bro can make use of some optional libraries and tools if they are found at build time: - * LibGeoIP (for geolocating IP addresses) + * libmaxminddb (for geolocating IP addresses) * sendmail (enables Bro and BroControl to send mail) * curl (used by a Bro script that implements active HTTP) * gperftools (tcmalloc is used to improve memory and CPU usage) @@ -125,9 +125,9 @@ build time: * PF_RING (Linux only, see :doc:`Cluster Configuration <../configuration/index>`) * ipsumdump (for trace-summary; http://www.cs.ucla.edu/~kohler/ipsumdump) -LibGeoIP is probably the most interesting and can be installed +Geolocation is probably the most interesting and can be installed on most platforms by following the instructions for :ref:`installing -libGeoIP and the GeoIP database +the GeoIP library and database `. diff --git a/scripts/base/frameworks/notice/actions/add-geodata.bro b/scripts/base/frameworks/notice/actions/add-geodata.bro index c762be3b86..ab9957327a 100644 --- a/scripts/base/frameworks/notice/actions/add-geodata.bro +++ b/scripts/base/frameworks/notice/actions/add-geodata.bro @@ -19,7 +19,7 @@ export { }; redef record Info += { - ## If libGeoIP support is built in, notices can have geographic + ## If GeoIP support is built in, notices can have geographic ## information attached to them. remote_location: geo_location &log &optional; }; diff --git a/scripts/base/utils/geoip-distance.bro b/scripts/base/utils/geoip-distance.bro index 3bcf93f828..8d3149cb03 100644 --- a/scripts/base/utils/geoip-distance.bro +++ b/scripts/base/utils/geoip-distance.bro @@ -1,7 +1,7 @@ ##! Functions to calculate distance between two locations, based on GeoIP data. ## Returns the distance between two IP addresses using the haversine formula, -## based on GeoIP database locations. Requires Bro to be built with libgeoip. +## based on GeoIP database locations. Requires Bro to be built with GeoIP. ## ## a1: First IP address. ## diff --git a/scripts/policy/protocols/smtp/detect-suspicious-orig.bro b/scripts/policy/protocols/smtp/detect-suspicious-orig.bro index 6fe37e02a8..9c7d16a658 100644 --- a/scripts/policy/protocols/smtp/detect-suspicious-orig.bro +++ b/scripts/policy/protocols/smtp/detect-suspicious-orig.bro @@ -9,8 +9,8 @@ export { }; ## Places where it's suspicious for mail to originate from represented - ## as all-capital, two character country codes (e.g., US). It requires - ## libGeoIP support built in. + ## as all-capital, two character country codes (e.g., US). It requires + ## Bro to be built with GeoIP support. const suspicious_origination_countries: set[string] = {} &redef; const suspicious_origination_networks: set[subnet] = {} &redef; diff --git a/scripts/site/local.bro b/scripts/site/local.bro index 5064d6a330..be6ddd8591 100644 --- a/scripts/site/local.bro +++ b/scripts/site/local.bro @@ -66,7 +66,7 @@ # certificate notary service; see http://notary.icsi.berkeley.edu . # @load protocols/ssl/notary -# If you have libGeoIP support built in, do some geographic detections and +# If you have GeoIP support built in, do some geographic detections and # logging for SSH traffic. @load protocols/ssh/geo-data # Detect hosts doing SSH bruteforce attacks.