mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
597a4d6704
- policy/ renamed to scripts/ - By default BROPATH now contains: - scripts/ - scripts/policy - scripts/site - *Nearly* all tests pass. - All of scripts/base/ is loaded by main.cc - Can be disabled by setting $BRO_NO_BASE_SCRIPTS - Scripts in scripts/base/ don't use relative path loading to ease use of BRO_NO_BASE_SCRIPTS (to copy and paste that script). - The scripts in scripts/base/protocols/ only (or soon will only) do logging and state building. - The scripts in scripts/base/frameworks/ add functionality without causing any additional overhead. - All "detection" activity happens through scripts in scripts/policy/. - Communications framework modified temporarily to need an environment variable to actually enable (ENABLE_COMMUNICATION=1) - This is so the communications framework can be loaded as part of the base without causing trouble when it's not needed. - This will be removed once a resolution to ticket #540 is reached.
53 lines
2 KiB
Text
53 lines
2 KiB
Text
# This file loads ALL policy scripts that are part of the Bro distribution.
|
|
#
|
|
# This is rarely makes sense, and is for testing only.
|
|
#
|
|
# Note that we have unit test that makes sure that all policy files shipped are
|
|
# actually loaded here. If we have files that are part of the distribution yet
|
|
# can't be loaded here, these must still be listed here with their load command
|
|
# commented out.
|
|
|
|
# The base/ scripts are all loaded by default and not included here.
|
|
|
|
# @load test-all.bro
|
|
# @load frameworks/communication/listen-clear.bro
|
|
# @load frameworks/communication/listen-ssl.bro
|
|
# @load frameworks/control/controllee
|
|
# @load frameworks/control/controller
|
|
@load frameworks/dpd/detect-protocols.bro
|
|
@load frameworks/dpd/packet-segment-logging.bro
|
|
@load frameworks/software/version-changes.bro
|
|
@load frameworks/software/vulnerable.bro
|
|
@load integration/barnyard2/__load__.bro
|
|
@load integration/barnyard2/base.bro
|
|
@load integration/barnyard2/event.bro
|
|
@load integration/barnyard2/types.bro
|
|
@load misc/analysis-groups.bro
|
|
@load misc/loaded-scripts.bro
|
|
@load misc/trim-trace-file.bro
|
|
@load protocols/conn/known-hosts.bro
|
|
@load protocols/conn/known-services.bro
|
|
@load protocols/dns/auth-addl.bro
|
|
@load protocols/dns/detect-external-names.bro
|
|
@load protocols/ftp/detect.bro
|
|
@load protocols/ftp/software.bro
|
|
@load protocols/http/detect-intel.bro
|
|
@load protocols/http/detect-MHR.bro
|
|
@load protocols/http/detect-sqli.bro
|
|
@load protocols/http/detect-webapps.bro
|
|
@load protocols/http/headers.bro
|
|
@load protocols/http/software.bro
|
|
@load protocols/http/var-extraction-cookies.bro
|
|
@load protocols/http/var-extraction-uri.bro
|
|
@load protocols/smtp/detect-suspicious-orig.bro
|
|
@load protocols/smtp/software.bro
|
|
@load protocols/ssh/software.bro
|
|
@load protocols/ssl/known-certs.bro
|
|
@load protocols/ssl/validate-certs.bro
|
|
@load tuning/__load__.bro
|
|
@load tuning/defaults/__load__.bro
|
|
@load tuning/defaults/packet-fragments.bro
|
|
@load tuning/defaults/remove-high-volume-notices.bro
|
|
@load tuning/defaults/warnings.bro
|
|
@load tuning/track-all-assets.bro
|
|
@load site/local
|