zeek/scripts/policy/frameworks
Christian Kreibich 742f7fe340 Management framework: add auto-enumeration of metrics ports
This is quite redundant with the enumeration for Broker ports,
unfortunately. But the logic is subtly different: all nodes obtain a telemetry
port, while not all nodes require a Broker port, for example, and in the metrics
port assignment we also cross-check selected Broker ports. I found more unified
code actually harder to read in the end.

The logic for the two sets remains the same: from a start point, ports get
enumerated sequentially that aren't otherwise taken. These ports are assumed
available; there's nothing that checks their availability -- for now.

The default start port is 9000. I considered 9090, to align with the Prometheus
default, but counting upward from there is likely to hit trouble with the Broker
default ports (9999/9997), used by the Supervisor. Counting downward is a bit
unnatural, and shifting the Broker default ports brings subtle ordering issues.

This also changes the node ordering logic slightly since it seems more intuitive
to keep sequential ports on a given instance, instead of striping across them.
2024-07-08 23:05:24 -07:00
..
cluster Add cluster_started and node_fully_connected events. 2023-04-21 19:04:52 +02:00
control Spelling fixes: scripts 2022-11-02 17:36:39 -04:00
dpd Introduce generic analyzer_confirmation_info and analyzer_violation_info 2022-09-27 17:49:51 +02:00
files Remove full scripts marked as 6.1 deprecations 2023-06-14 10:07:22 -07:00
intel intel/seen/file-names: Use file_over_new_connection() 2023-01-10 10:10:28 +01:00
management Management framework: add auto-enumeration of metrics ports 2024-07-08 23:05:24 -07:00
netcontrol Netcontrol: add rule_added_policy 2024-02-05 18:52:27 +00:00
notice Fix check for emailed notices 2023-09-01 13:23:45 -04:00
packet-filter More bro-to-zeek renaming in scripts and other files 2019-05-16 02:36:41 -05:00
signatures signatures/iso-9660: Add \x01 suffix to CD001 2024-02-26 21:00:01 +01:00
software policy: Use literal dots for patterns used against content-type and hostname 2022-07-11 10:34:47 +02:00
spicy all: Fix typos identified by typos pre-commit hook 2023-06-13 17:57:32 +02:00
telemetry Comment-only tweaks for telemetry-related settings. 2024-07-08 23:05:24 -07:00