mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 15:18:20 +00:00
7e9d48f532
The broxygen-generated files now live in the git repo, have tests that check that they are up-to-date, and a script to re-generate them on-demand.
218 lines
7.6 KiB
ReStructuredText
218 lines
7.6 KiB
ReStructuredText
:tocdepth: 3
|
|
|
|
base/frameworks/control/main.bro
|
|
================================
|
|
.. bro:namespace:: Control
|
|
|
|
The control framework provides the foundation for providing "commands"
|
|
that can be taken remotely at runtime to modify a running Bro instance
|
|
or collect information from the running instance.
|
|
|
|
:Namespace: Control
|
|
|
|
Summary
|
|
~~~~~~~
|
|
Redefinable Options
|
|
###################
|
|
========================================================================= ================================================================
|
|
:bro:id:`Control::arg`: :bro:type:`string` :bro:attr:`&redef` This can be used by commands that take an argument.
|
|
:bro:id:`Control::cmd`: :bro:type:`string` :bro:attr:`&redef` The command that is being done.
|
|
:bro:id:`Control::commands`: :bro:type:`set` :bro:attr:`&redef` The commands that can currently be given on the command line for
|
|
remote control.
|
|
:bro:id:`Control::controllee_listen`: :bro:type:`bool` :bro:attr:`&redef` Whether the controllee should call :bro:see:`Broker::listen`.
|
|
:bro:id:`Control::host`: :bro:type:`addr` :bro:attr:`&redef` The address of the host that will be controlled.
|
|
:bro:id:`Control::host_port`: :bro:type:`port` :bro:attr:`&redef` The port of the host that will be controlled.
|
|
:bro:id:`Control::zone_id`: :bro:type:`string` :bro:attr:`&redef` If :bro:id:`Control::host` is a non-global IPv6 address and
|
|
requires a specific :rfc:`4007` ``zone_id``, it can be set here.
|
|
========================================================================= ================================================================
|
|
|
|
Constants
|
|
#########
|
|
=================================================== =================================================================
|
|
:bro:id:`Control::ignore_ids`: :bro:type:`set` Variable IDs that are to be ignored by the update process.
|
|
:bro:id:`Control::topic_prefix`: :bro:type:`string` The topic prefix used for exchanging control messages via Broker.
|
|
=================================================== =================================================================
|
|
|
|
Events
|
|
######
|
|
=================================================================== ====================================================================
|
|
:bro:id:`Control::configuration_update`: :bro:type:`event` This event is a wrapper and alias for the
|
|
:bro:id:`Control::configuration_update_request` event.
|
|
:bro:id:`Control::configuration_update_request`: :bro:type:`event` Inform the remote Bro instance that it's configuration may have been
|
|
updated.
|
|
:bro:id:`Control::configuration_update_response`: :bro:type:`event` Message in response to a configuration update request.
|
|
:bro:id:`Control::id_value_request`: :bro:type:`event` Event for requesting the value of an ID (a variable).
|
|
:bro:id:`Control::id_value_response`: :bro:type:`event` Event for returning the value of an ID after an
|
|
:bro:id:`Control::id_value_request` event.
|
|
:bro:id:`Control::net_stats_request`: :bro:type:`event` Requests the current net_stats.
|
|
:bro:id:`Control::net_stats_response`: :bro:type:`event` Returns the current net_stats.
|
|
:bro:id:`Control::peer_status_request`: :bro:type:`event` Requests the current communication status.
|
|
:bro:id:`Control::peer_status_response`: :bro:type:`event` Returns the current communication status.
|
|
:bro:id:`Control::shutdown_request`: :bro:type:`event` Requests that the Bro instance begins shutting down.
|
|
:bro:id:`Control::shutdown_response`: :bro:type:`event` Message in response to a shutdown request.
|
|
=================================================================== ====================================================================
|
|
|
|
|
|
Detailed Interface
|
|
~~~~~~~~~~~~~~~~~~
|
|
Redefinable Options
|
|
###################
|
|
.. bro:id:: Control::arg
|
|
|
|
:Type: :bro:type:`string`
|
|
:Attributes: :bro:attr:`&redef`
|
|
:Default: ``""``
|
|
|
|
This can be used by commands that take an argument.
|
|
|
|
.. bro:id:: Control::cmd
|
|
|
|
:Type: :bro:type:`string`
|
|
:Attributes: :bro:attr:`&redef`
|
|
:Default: ``""``
|
|
|
|
The command that is being done. It's typically set on the
|
|
command line.
|
|
|
|
.. bro:id:: Control::commands
|
|
|
|
:Type: :bro:type:`set` [:bro:type:`string`]
|
|
:Attributes: :bro:attr:`&redef`
|
|
:Default:
|
|
|
|
::
|
|
|
|
{
|
|
"shutdown",
|
|
"id_value",
|
|
"net_stats",
|
|
"peer_status",
|
|
"configuration_update"
|
|
}
|
|
|
|
The commands that can currently be given on the command line for
|
|
remote control.
|
|
|
|
.. bro:id:: Control::controllee_listen
|
|
|
|
:Type: :bro:type:`bool`
|
|
:Attributes: :bro:attr:`&redef`
|
|
:Default: ``T``
|
|
|
|
Whether the controllee should call :bro:see:`Broker::listen`.
|
|
In a cluster, this isn't needed since the setup process calls it.
|
|
|
|
.. bro:id:: Control::host
|
|
|
|
:Type: :bro:type:`addr`
|
|
:Attributes: :bro:attr:`&redef`
|
|
:Default: ``0.0.0.0``
|
|
|
|
The address of the host that will be controlled.
|
|
|
|
.. bro:id:: Control::host_port
|
|
|
|
:Type: :bro:type:`port`
|
|
:Attributes: :bro:attr:`&redef`
|
|
:Default: ``0/tcp``
|
|
|
|
The port of the host that will be controlled.
|
|
|
|
.. bro:id:: Control::zone_id
|
|
|
|
:Type: :bro:type:`string`
|
|
:Attributes: :bro:attr:`&redef`
|
|
:Default: ``""``
|
|
|
|
If :bro:id:`Control::host` is a non-global IPv6 address and
|
|
requires a specific :rfc:`4007` ``zone_id``, it can be set here.
|
|
|
|
Constants
|
|
#########
|
|
.. bro:id:: Control::ignore_ids
|
|
|
|
:Type: :bro:type:`set` [:bro:type:`string`]
|
|
:Default: ``{}``
|
|
|
|
Variable IDs that are to be ignored by the update process.
|
|
|
|
.. bro:id:: Control::topic_prefix
|
|
|
|
:Type: :bro:type:`string`
|
|
:Default: ``"bro/control"``
|
|
|
|
The topic prefix used for exchanging control messages via Broker.
|
|
|
|
Events
|
|
######
|
|
.. bro:id:: Control::configuration_update
|
|
|
|
:Type: :bro:type:`event` ()
|
|
|
|
This event is a wrapper and alias for the
|
|
:bro:id:`Control::configuration_update_request` event.
|
|
This event is also a primary hooking point for the control framework.
|
|
|
|
.. bro:id:: Control::configuration_update_request
|
|
|
|
:Type: :bro:type:`event` ()
|
|
|
|
Inform the remote Bro instance that it's configuration may have been
|
|
updated.
|
|
|
|
.. bro:id:: Control::configuration_update_response
|
|
|
|
:Type: :bro:type:`event` ()
|
|
|
|
Message in response to a configuration update request.
|
|
|
|
.. bro:id:: Control::id_value_request
|
|
|
|
:Type: :bro:type:`event` (id: :bro:type:`string`)
|
|
|
|
Event for requesting the value of an ID (a variable).
|
|
|
|
.. bro:id:: Control::id_value_response
|
|
|
|
:Type: :bro:type:`event` (id: :bro:type:`string`, val: :bro:type:`string`)
|
|
|
|
Event for returning the value of an ID after an
|
|
:bro:id:`Control::id_value_request` event.
|
|
|
|
.. bro:id:: Control::net_stats_request
|
|
|
|
:Type: :bro:type:`event` ()
|
|
|
|
Requests the current net_stats.
|
|
|
|
.. bro:id:: Control::net_stats_response
|
|
|
|
:Type: :bro:type:`event` (s: :bro:type:`string`)
|
|
|
|
Returns the current net_stats.
|
|
|
|
.. bro:id:: Control::peer_status_request
|
|
|
|
:Type: :bro:type:`event` ()
|
|
|
|
Requests the current communication status.
|
|
|
|
.. bro:id:: Control::peer_status_response
|
|
|
|
:Type: :bro:type:`event` (s: :bro:type:`string`)
|
|
|
|
Returns the current communication status.
|
|
|
|
.. bro:id:: Control::shutdown_request
|
|
|
|
:Type: :bro:type:`event` ()
|
|
|
|
Requests that the Bro instance begins shutting down.
|
|
|
|
.. bro:id:: Control::shutdown_response
|
|
|
|
:Type: :bro:type:`event` ()
|
|
|
|
Message in response to a shutdown request.
|
|
|
|
|