##! The controllee portion of the control framework. Load this script if remote ##! runtime control of the Bro process is desired. ##! ##! A controllee only needs to load the controllee script in addition ##! to the specific analysis scripts desired. It may also need a node ##! configured as a controller node in the communications nodes configuration:: ##! ##! bro frameworks/control/controllee @load base/frameworks/control # If an instance is a controllee, it implicitly needs to listen for remote # connections. @load frameworks/communication/listen module Control; event Control::id_value_request(id: string) { local val = lookup_ID(id); event Control::id_value_response(id, fmt("%s", val)); } event Control::peer_status_request() { } event Control::net_stats_request() { } event Control::configuration_update_request() { # Generate the alias event. event Control::configuration_update(); # Don't need to do anything in particular here, it's just indicating that # the configuration is going to be updated. This event could be handled # by other scripts if they need to do some ancilliary processing if # redef-able consts are modified at runtime. event Control::configuration_update_response(); } event Control::shutdown_request() { # Send the acknowledgement event. event Control::shutdown_response(); # Schedule the shutdown to let the current event queue flush itself first. event terminate_event(); }