Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

minor restyle and add comments

Browse source
This commit is contained in:
Mauro Palumbo 2019-08-07 10:32:36 +02:00
parent 8e418d3c7b
commit f93e41fd3f
1 changed files with 28 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

35
scripts/base/frameworks/intel/input.zeek
View file

@ -21,16 +21,37 @@ export {
## additionally. ## additionally.
const path_prefix = "" &redef; const path_prefix = "" &redef;
event Intel::read_entry(desc: Input::EventDescription, tpe: Input::Event, item: Intel::Item) ## This event is raised each time the intel framework reads a new line
{ ## from an intel file. It is used in the intel framework but can
Intel::insert(item); ## also be used in custom scripts for further checks.
} ##
## desc: The :zeek:type:`Input::EventDescription` record which generated the event.
##
## tpe: The type of input event.
##
## item: The intel item being read (of type :zeek:type:`Intel::Item`).
##
global read_entry: event(desc: Input::EventDescription, tpe: Input::Event, item: Intel::Item);
event Intel::read_error(desc: Input::EventDescription, message: string, level: Reporter::Level) ## This event is raised each time the input framework detects an error
{ ## while reading the intel file. It can be used to implement further checks
} ## in custom scripts. Errors can be of different levels (information, warning, errors).
##
## desc: The :zeek:type:`Input::EventDescription` record which generated the error.
##
## message: An error message.
##
## level: The :zeek:type:`Reporter::Level` of the error.
##
global read_error: event(desc: Input::EventDescription, message: string, level: Reporter::Level);
} }
event Intel::read_entry(desc: Input::EventDescription, tpe: Input::Event, item: Intel::Item)
{
Intel::insert(item);
}
event zeek_init() &priority=5 event zeek_init() &priority=5
{ {
if ( ! Cluster::is_enabled() || if ( ! Cluster::is_enabled() ||