mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
Replace references to libgeoip in the documentation
Replace references to the old libgeoip library with "libmaxminddb" or "GeoIP support".
This commit is contained in:
parent
f40e317c0d
commit
c941c565a6
5 changed files with 8 additions and 8 deletions
|
@ -117,7 +117,7 @@ Optional Dependencies
|
|||
Bro can make use of some optional libraries and tools if they are found at
|
||||
build time:
|
||||
|
||||
* LibGeoIP (for geolocating IP addresses)
|
||||
* libmaxminddb (for geolocating IP addresses)
|
||||
* sendmail (enables Bro and BroControl to send mail)
|
||||
* curl (used by a Bro script that implements active HTTP)
|
||||
* gperftools (tcmalloc is used to improve memory and CPU usage)
|
||||
|
@ -125,9 +125,9 @@ build time:
|
|||
* PF_RING (Linux only, see :doc:`Cluster Configuration <../configuration/index>`)
|
||||
* ipsumdump (for trace-summary; http://www.cs.ucla.edu/~kohler/ipsumdump)
|
||||
|
||||
LibGeoIP is probably the most interesting and can be installed
|
||||
Geolocation is probably the most interesting and can be installed
|
||||
on most platforms by following the instructions for :ref:`installing
|
||||
libGeoIP and the GeoIP database
|
||||
the GeoIP library and database
|
||||
<geolocation>`.
|
||||
|
||||
|
||||
|
|
|
@ -19,7 +19,7 @@ export {
|
|||
};
|
||||
|
||||
redef record Info += {
|
||||
## If libGeoIP support is built in, notices can have geographic
|
||||
## If GeoIP support is built in, notices can have geographic
|
||||
## information attached to them.
|
||||
remote_location: geo_location &log &optional;
|
||||
};
|
||||
|
|
|
@ -1,7 +1,7 @@
|
|||
##! Functions to calculate distance between two locations, based on GeoIP data.
|
||||
|
||||
## Returns the distance between two IP addresses using the haversine formula,
|
||||
## based on GeoIP database locations. Requires Bro to be built with libgeoip.
|
||||
## based on GeoIP database locations. Requires Bro to be built with GeoIP.
|
||||
##
|
||||
## a1: First IP address.
|
||||
##
|
||||
|
|
|
@ -10,7 +10,7 @@ export {
|
|||
|
||||
## Places where it's suspicious for mail to originate from represented
|
||||
## as all-capital, two character country codes (e.g., US). It requires
|
||||
## libGeoIP support built in.
|
||||
## Bro to be built with GeoIP support.
|
||||
const suspicious_origination_countries: set[string] = {} &redef;
|
||||
const suspicious_origination_networks: set[subnet] = {} &redef;
|
||||
|
||||
|
|
|
@ -66,7 +66,7 @@
|
|||
# certificate notary service; see http://notary.icsi.berkeley.edu .
|
||||
# @load protocols/ssl/notary
|
||||
|
||||
# If you have libGeoIP support built in, do some geographic detections and
|
||||
# If you have GeoIP support built in, do some geographic detections and
|
||||
# logging for SSH traffic.
|
||||
@load protocols/ssh/geo-data
|
||||
# Detect hosts doing SSH bruteforce attacks.
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue