Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Replace references to libgeoip in the documentation

Browse source 
Replace references to the old libgeoip library with "libmaxminddb" or
"GeoIP support".
This commit is contained in:
Daniel Thayer 2018-08-16 15:45:58 -05:00
parent f40e317c0d
commit c941c565a6
5 changed files with 8 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

6
doc/install/install.rst
View file

@ -117,7 +117,7 @@ Optional Dependencies
Bro can make use of some optional libraries and tools if they are found at Bro can make use of some optional libraries and tools if they are found at
build time: build time:
* LibGeoIP (for geolocating IP addresses) * libmaxminddb (for geolocating IP addresses)
* sendmail (enables Bro and BroControl to send mail) * sendmail (enables Bro and BroControl to send mail)
* curl (used by a Bro script that implements active HTTP) * curl (used by a Bro script that implements active HTTP)
* gperftools (tcmalloc is used to improve memory and CPU usage) * gperftools (tcmalloc is used to improve memory and CPU usage)
@ -125,9 +125,9 @@ build time:
* PF_RING (Linux only, see :doc:`Cluster Configuration <../configuration/index>`) * PF_RING (Linux only, see :doc:`Cluster Configuration <../configuration/index>`)
* ipsumdump (for trace-summary; http://www.cs.ucla.edu/~kohler/ipsumdump) * ipsumdump (for trace-summary; http://www.cs.ucla.edu/~kohler/ipsumdump)
LibGeoIP is probably the most interesting and can be installed Geolocation is probably the most interesting and can be installed
on most platforms by following the instructions for :ref:`installing on most platforms by following the instructions for :ref:`installing
libGeoIP and the GeoIP database the GeoIP library and database
<geolocation>`. <geolocation>`.

2
scripts/base/frameworks/notice/actions/add-geodata.bro
View file

@ -19,7 +19,7 @@ export {
}; };
redef record Info += { redef record Info += {
## If libGeoIP support is built in, notices can have geographic ## If GeoIP support is built in, notices can have geographic
## information attached to them. ## information attached to them.
remote_location: geo_location &log &optional; remote_location: geo_location &log &optional;
}; };

2
scripts/base/utils/geoip-distance.bro
View file

@ -1,7 +1,7 @@
##! Functions to calculate distance between two locations, based on GeoIP data. ##! Functions to calculate distance between two locations, based on GeoIP data.
## Returns the distance between two IP addresses using the haversine formula, ## Returns the distance between two IP addresses using the haversine formula,
## based on GeoIP database locations. Requires Bro to be built with libgeoip. ## based on GeoIP database locations. Requires Bro to be built with GeoIP.
## ##
## a1: First IP address. ## a1: First IP address.
## ##

2
scripts/policy/protocols/smtp/detect-suspicious-orig.bro
View file

@ -10,7 +10,7 @@ export {
## Places where it's suspicious for mail to originate from represented ## Places where it's suspicious for mail to originate from represented
## as all-capital, two character country codes (e.g., US). It requires ## as all-capital, two character country codes (e.g., US). It requires
## libGeoIP support built in. ## Bro to be built with GeoIP support.
const suspicious_origination_countries: set[string] = {} &redef; const suspicious_origination_countries: set[string] = {} &redef;
const suspicious_origination_networks: set[subnet] = {} &redef; const suspicious_origination_networks: set[subnet] = {} &redef;

2
scripts/site/local.bro
View file

@ -66,7 +66,7 @@
# certificate notary service; see http://notary.icsi.berkeley.edu . # certificate notary service; see http://notary.icsi.berkeley.edu .
# @load protocols/ssl/notary # @load protocols/ssl/notary
# If you have libGeoIP support built in, do some geographic detections and # If you have GeoIP support built in, do some geographic detections and
# logging for SSH traffic. # logging for SSH traffic.
@load protocols/ssh/geo-data @load protocols/ssh/geo-data
# Detect hosts doing SSH bruteforce attacks. # Detect hosts doing SSH bruteforce attacks.