Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-13 12:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Copy docs into Zeek repo directly

Browse source 
This is based on commit 2731def9159247e6da8a3191783c89683363689c from the
zeek-docs repo.
This commit is contained in:
Tim Wojtulewicz 2025-09-15 15:52:18 -07:00
parent 83f1e74643
commit ded98cd373
1074 changed files with 169319 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

47
doc/scripting/event_groups_module_01.zeek Normal file
View file

@ -0,0 +1,47 @@
@load base/frameworks/config
@load ja3
@load zeek-community-id
@load zeek-community-id/notice
redef Config::config_files += { "./myconfig.dat" };
module Packages;
export {
# All packages off by default.
option community_id_enabled = F;
option ja3_enabled = F;
}
event zeek_init()
{
local package_change_handler = function(id: string, new_value: bool): bool {
local modules: set[string];
if ( id == "Packages::community_id_enabled" )
modules = ["CommunityID", "CommunityID::Notice"];
else if ( id == "Packages::ja3_enabled" )
modules = ["JA3", "JA3_Server"];
else
{
Reporter::error(fmt("Unknown option: %s", id));
return new_value;
}
# Toggle the modules.
for ( m in modules )
if ( new_value )
enable_module_events(m);
else
disable_module_events(m);
return new_value;
};
Option::set_change_handler("Packages::community_id_enabled", package_change_handler);
Option::set_change_handler("Packages::ja3_enabled", package_change_handler);
Config::set_value("Packages::community_id_enabled", community_id_enabled);
Config::set_value("Packages::ja3_enabled", ja3_enabled);
}