mirror of
https://github.com/zeek/zeek.git
synced 2025-10-15 04:58:21 +00:00
ab15437339
- Moving all functions into the Log::* namespace, using the recent bifcl updates. Moved logging-specific stuff to logging.bif. - Log::create_stream() now takes a record Log::Stream as its second argument, which specifies columns and (optionally) the event. - All the internal BiFs are now called "Log::__<something>", with script-level wrappers "Log::<something>". That first allows to add additional code at the script-level, and second makes things better comprehendible as now all relevant functionality is collected (and later documetned) in policy/logging.bro. - New function Log::flush(id), which does the obvious assuming the writer supports it. - add_default_filter() is now called implicitly with every create_stream(). Seems that we usually want that functionality, and when not, remove_default_filter() gets rid of it. - The namespace of a stream's ID is now used as the default "path" (e.g., if the namespace is SSH, the default log file is "ssh.log"). - Updated policy/test-logging.bro as well as the btest tests according to these changes.
63 lines
944 B
Text
63 lines
944 B
Text
|
|
enum dce_rpc_ptype %{
|
|
DCE_RPC_REQUEST,
|
|
DCE_RPC_PING,
|
|
DCE_RPC_RESPONSE,
|
|
DCE_RPC_FAULT,
|
|
DCE_RPC_WORKING,
|
|
DCE_RPC_NOCALL,
|
|
DCE_RPC_REJECT,
|
|
DCE_RPC_ACK,
|
|
DCE_RPC_CL_CANCEL,
|
|
DCE_RPC_FACK,
|
|
DCE_RPC_CANCEL_ACK,
|
|
DCE_RPC_BIND,
|
|
DCE_RPC_BIND_ACK,
|
|
DCE_RPC_BIND_NAK,
|
|
DCE_RPC_ALTER_CONTEXT,
|
|
DCE_RPC_ALTER_CONTEXT_RESP,
|
|
DCE_RPC_SHUTDOWN,
|
|
DCE_RPC_CO_CANCEL,
|
|
DCE_RPC_ORPHANED,
|
|
%}
|
|
|
|
enum dce_rpc_if_id %{
|
|
DCE_RPC_unknown_if,
|
|
DCE_RPC_epmapper,
|
|
DCE_RPC_lsarpc,
|
|
DCE_RPC_lsa_ds,
|
|
DCE_RPC_mgmt,
|
|
DCE_RPC_netlogon,
|
|
DCE_RPC_samr,
|
|
DCE_RPC_srvsvc,
|
|
DCE_RPC_spoolss,
|
|
DCE_RPC_drs,
|
|
DCE_RPC_winspipe,
|
|
DCE_RPC_wkssvc,
|
|
DCE_RPC_oxid,
|
|
DCE_RPC_ISCMActivator,
|
|
%}
|
|
|
|
enum rpc_status %{
|
|
RPC_SUCCESS,
|
|
RPC_PROG_UNAVAIL,
|
|
RPC_PROG_MISMATCH,
|
|
RPC_PROC_UNAVAIL,
|
|
RPC_GARBAGE_ARGS,
|
|
RPC_SYSTEM_ERR,
|
|
RPC_TIMEOUT,
|
|
RPC_VERS_MISMATCH,
|
|
RPC_AUTH_ERROR,
|
|
RPC_UNKNOWN_ERROR,
|
|
%}
|
|
|
|
module Log;
|
|
|
|
enum Writer %{
|
|
WRITER_DEFAULT,
|
|
WRITER_ASCII,
|
|
%}
|
|
|
|
enum ID %{
|
|
Unknown,
|
|
%}
|