Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

improve logging with broker store

Browse source
This commit is contained in:
Mauro Palumbo 2019-07-31 17:40:02 +02:00
parent 1f7f42daea
commit e206347d1a
1 changed files with 19 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

37
scripts/policy/protocols/conn/known-services.zeek
View file

@ -40,7 +40,7 @@ export {
type AddrPortServTriplet: record {
host: addr;
p: port;
serv: vector of string;
serv: string;
};
## Holds the set of all known services. Keys in the store are
@ -109,28 +109,29 @@ event service_info_commit(info: ServicesInfo)
if ( ! Known::use_service_store )
return;
local v : vector of string;
for ( s in info$service )
v += s;
sort(v, strcmp); # sort the vector for proper key comparison in put_unique
local tempservs = info$service;
for ( s in tempservs ) {
local key = AddrPortServTriplet($host = info$host, $p = info$port_num, $serv = v);
local key = AddrPortServTriplet($host = info$host, $p = info$port_num, $serv = s);
when ( local r = Broker::put_unique(Known::service_store$store, key,
when ( local r = Broker::put_unique(Known::service_store$store, key,
T, Known::service_store_expiry) )
{
if ( r$status == Broker::SUCCESS )
{
if ( r$result as bool )
Log::write(Known::SERVICES_LOG, info);
if ( r$status == Broker::SUCCESS )
{
if ( r$result as bool ) {
info$service = set(s); # log one service at the time if multiservice
Log::write(Known::SERVICES_LOG, info);
}
}
else
Reporter::error(fmt("%s: data store put_unique failure",
Known::service_store_name));
}
timeout Known::service_store_timeout
{
Log::write(Known::SERVICES_LOG, info);
}
else
Reporter::error(fmt("%s: data store put_unique failure",
Known::service_store_name));
}
timeout Known::service_store_timeout
{
Log::write(Known::SERVICES_LOG, info);
}
}