mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
35c79ab2e3
This is a cluster backend implementation using a central XPUB/XSUB proxy that by default runs on the manager node. Logging is implemented leveraging PUSH/PULL sockets between logger and other nodes, rather than going through XPUB/XSUB. The test-all-policy-cluster baseline changed: Previously, Broker::peer() would be called from setup-connections.zeek, causing the IO loop to be alive. With the ZeroMQ backend, the IO loop is only alive when Cluster::init() is called, but that doesn't happen anymore.
37 lines
1.3 KiB
Text
37 lines
1.3 KiB
Text
@load test-all-policy.zeek
|
|
|
|
# Scripts which are commented out in test-all-policy.zeek.
|
|
@load protocols/ssl/decryption.zeek
|
|
@load frameworks/cluster/backend/zeromq/connect.zeek
|
|
@load frameworks/cluster/nodes-experimental/manager.zeek
|
|
@load frameworks/control/controllee.zeek
|
|
@load frameworks/control/controller.zeek
|
|
@load frameworks/management/agent/main.zeek
|
|
@load frameworks/management/controller/main.zeek
|
|
@load frameworks/management/node/__load__.zeek
|
|
@load frameworks/management/node/main.zeek
|
|
@load frameworks/files/extract-all-files.zeek
|
|
@load frameworks/signatures/iso-9660.zeek
|
|
@load policy/misc/dump-events.zeek
|
|
@load policy/protocols/conn/speculative-service.zeek
|
|
|
|
@if ( have_spicy() )
|
|
# Loading this messes up documentation of some elements defined elsewhere.
|
|
# @load frameworks/spicy/record-spicy-batch.zeek
|
|
@load frameworks/spicy/resource-usage.zeek
|
|
@endif
|
|
|
|
@load ./example.zeek
|
|
|
|
event zeek_init() &priority=1000
|
|
{
|
|
# Disable events in modules that use zeek_init() to do stuff and may
|
|
# fail when run under zeekygen. For the purpose of zeekygen, we could
|
|
# probably disable all modules, too.
|
|
disable_module_events("Control");
|
|
disable_module_events("Cluster::Backend::ZeroMQ");
|
|
disable_module_events("Management::Agent::Runtime");
|
|
disable_module_events("Management::Controller::Runtime");
|
|
disable_module_events("Management::Node");
|
|
terminate();
|
|
}
|