Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

minor restyle and add comments

Browse source
This commit is contained in:
Mauro Palumbo 2019-08-07 10:32:36 +02:00
parent 8e418d3c7b
commit f93e41fd3f
1 changed files with 28 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

29
scripts/base/frameworks/intel/input.zeek
View file

@ -21,15 +21,36 @@ export {
## additionally. ## additionally.
const path_prefix = "" &redef; const path_prefix = "" &redef;
## This event is raised each time the intel framework reads a new line
## from an intel file. It is used in the intel framework but can
## also be used in custom scripts for further checks.
##
## desc: The :zeek:type:`Input::EventDescription` record which generated the event.
##
## tpe: The type of input event.
##
## item: The intel item being read (of type :zeek:type:`Intel::Item`).
##
global read_entry: event(desc: Input::EventDescription, tpe: Input::Event, item: Intel::Item);
## This event is raised each time the input framework detects an error
## while reading the intel file. It can be used to implement further checks
## in custom scripts. Errors can be of different levels (information, warning, errors).
##
## desc: The :zeek:type:`Input::EventDescription` record which generated the error.
##
## message: An error message.
##
## level: The :zeek:type:`Reporter::Level` of the error.
##
global read_error: event(desc: Input::EventDescription, message: string, level: Reporter::Level);
}
event Intel::read_entry(desc: Input::EventDescription, tpe: Input::Event, item: Intel::Item) event Intel::read_entry(desc: Input::EventDescription, tpe: Input::Event, item: Intel::Item)
{ {
Intel::insert(item); Intel::insert(item);
} }
event Intel::read_error(desc: Input::EventDescription, message: string, level: Reporter::Level)
{
}
}
event zeek_init() &priority=5 event zeek_init() &priority=5
{ {