From owner-svn-ports-head@freebsd.org Sun Nov 17 01:03:06 2019 Return-Path: Delivered-To: svn-ports-head@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id B81C81B20AE; Sun, 17 Nov 2019 01:03:06 +0000 (UTC) (envelope-from leres@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 47Fv2y4xDPz4Cwg; Sun, 17 Nov 2019 01:03:06 +0000 (UTC) (envelope-from leres@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 8612CA050; Sun, 17 Nov 2019 01:03:06 +0000 (UTC) (envelope-from leres@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id xAH136b1077136; Sun, 17 Nov 2019 01:03:06 GMT (envelope-from leres@FreeBSD.org) Received: (from leres@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id xAH134T5077129; Sun, 17 Nov 2019 01:03:04 GMT (envelope-from leres@FreeBSD.org) Message-Id: <201911170103.xAH134T5077129@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: leres set sender to leres@FreeBSD.org using -f From: Craig Leres Date: Sun, 17 Nov 2019 01:03:04 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r517788 - in head: . security security/zeek security/zeek/files X-SVN-Group: ports-head X-SVN-Commit-Author: leres X-SVN-Commit-Paths: in head: . security security/zeek security/zeek/files X-SVN-Commit-Revision: 517788 X-SVN-Commit-Repository: ports MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-head@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SVN commit messages for the ports tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Nov 2019 01:03:06 -0000 Author: leres Date: Sun Nov 17 01:03:04 2019 New Revision: 517788 URL: https://svnweb.freebsd.org/changeset/ports/517788 Log: security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376 Added: head/security/zeek/ - copied from r517623, head/security/bro/ head/security/zeek/files/zeek.in - copied, changed from r517623, head/security/bro/files/bro.in Deleted: head/security/zeek/files/bro.in Modified: head/GIDs head/UIDs head/security/Makefile head/security/zeek/Makefile head/security/zeek/distinfo head/security/zeek/pkg-descr head/security/zeek/pkg-plist Modified: head/GIDs ============================================================================== --- head/GIDs Sun Nov 17 00:55:03 2019 (r517787) +++ head/GIDs Sun Nov 17 01:03:04 2019 (r517788) @@ -722,7 +722,7 @@ litecoin:*:778: bitcoin:*:779: zetacoin:*:780: monero:*:781: -# free: 782 +zeek:*:782 # free: 783 # free: 784 # free: 785 Modified: head/UIDs ============================================================================== --- head/UIDs Sun Nov 17 00:55:03 2019 (r517787) +++ head/UIDs Sun Nov 17 01:03:04 2019 (r517788) @@ -727,7 +727,7 @@ litecoin:*:778:778::0:0:litecoin Daemon:/var/db/liteco bitcoin:*:779:779::0:0:bitcoin Daemon:/var/db/bitcoin:/usr/sbin/nologin zetacoin:*:780:780::0:0:ZetaCoin Daemon:/nonexistent:/usr/sbin/nologin monero:*:781:781::0:0:Monero Daemon:/var/db/monero:/usr/sbin/nologin -# free: 782 +zeek:*:782:782::0:0:Zeek Network Security Monitor:/nonexistent:/usr/sbin/nologin # free: 783 # free: 784 # free: 785 Modified: head/security/Makefile ============================================================================== --- head/security/Makefile Sun Nov 17 00:55:03 2019 (r517787) +++ head/security/Makefile Sun Nov 17 01:03:04 2019 (r517788) @@ -1329,6 +1329,7 @@ SUBDIR += yubikey-personalization-gui SUBDIR += yubioath-desktop SUBDIR += zebedee + SUBDIR += zeek SUBDIR += zenmap SUBDIR += zeronet SUBDIR += zxid Modified: head/security/zeek/Makefile ============================================================================== --- head/security/bro/Makefile Thu Nov 14 22:48:31 2019 (r517623) +++ head/security/zeek/Makefile Sun Nov 17 01:03:04 2019 (r517788) @@ -1,9 +1,8 @@ # Created by: David O'Brien # $FreeBSD$ -PORTNAME= bro -PORTVERSION= 2.6.4 -PORTREVISION= 1 +PORTNAME= zeek +PORTVERSION= 3.0.0 CATEGORIES= security MASTER_SITES= https://www.zeek.org/downloads/ DISTFILES= ${DISTNAME}${EXTRACT_SUFX} @@ -20,18 +19,20 @@ USES= bison cmake compiler:c++11-lang gettext-runtime CMAKE_ARGS+= -DPYTHON_EXECUTABLE:PATH=${PYTHON_CMD} CXXFLAGS+= -std=c++11 -Wall -SHEBANG_FILES= aux/broctl/aux/trace-summary/trace-summary +CONFLICTS= bro +SHEBANG_FILES= aux/zeekctl/aux/trace-summary/trace-summary + SUB_FILES= pkg-message NO_MTREE= yes CMAKE_ARGS+= -GNinja \ -D CMAKE_INSTALL_PREFIX:PATH=${PREFIX} \ - -D BRO_ROOT_DIR:PATH=${PREFIX} \ - -D PY_MOD_INSTALL_DIR:PATH=${PREFIX}/lib/broctl \ - -D BRO_SCRIPT_INSTALL_PATH:PATH=${PREFIX}/share/bro \ - -D BRO_ETC_INSTALL_DIR:PATH=${PREFIX}/etc \ - -D BRO_MAN_INSTALL_PATH=${MANPREFIX}/man \ + -D ZEEK_ROOT_DIR:PATH=${PREFIX} \ + -D PY_MOD_INSTALL_DIR:PATH=${PREFIX}/lib/zeekctl \ + -D ZEEK_SCRIPT_INSTALL_PATH:PATH=${PREFIX}/share/zeek \ + -D ZEEK_ETC_INSTALL_DIR:PATH=${PREFIX}/etc \ + -D ZEEK_MAN_INSTALL_PATH=${MANPREFIX}/man \ -D ENABLE_PERFTOOLS:BOOL=false \ -D ENABLE_PERFTOOLS_DEBUG:BOOL=false \ -D BinPAC_SKIP_INSTALL:BOOL=true \ @@ -40,23 +41,22 @@ CMAKE_ARGS+= -GNinja \ -D BUILD_STATIC_BROKER:BOOL=true \ -D CMAKE_EXE_LINKER_FLAGS="${OPENSSL_LDFLAGS}" -BROUSER?= bro -BROGROUP?= bro +ZEEKUSER?= zeek +ZEEKGROUP?= zeek PLIST_SUB+= ARCH=${ARCH} \ - BROUSER=${BROUSER} \ - BROGROUP=${BROGROUP} \ + ZEEKUSER=${ZEEKUSER} \ + ZEEKGROUP=${ZEEKGROUP} \ LCASE_OPSYS=${OPSYS:tl} -USERS= ${BROUSER} -GROUPS= ${BROGROUP} +USERS= ${ZEEKUSER} +GROUPS= ${ZEEKGROUP} -OPTIONS_DEFINE= BROCCOLI BROCTL BROKER DEBUG GEOIP2 IPSUMDUMP LBL_CF \ - LBL_HF NETMAP PERFTOOLS -OPTIONS_DEFAULT=BROCTL BROKER GEOIP2 IPSUMDUMP LBL_CF LBL_HF NETMAP +OPTIONS_DEFINE= BROCCOLI BROKER DEBUG GEOIP2 IPSUMDUMP LBL_CF LBL_HF \ + NETMAP PERFTOOLS ZEEKCTL +OPTIONS_DEFAULT=BROKER GEOIP2 IPSUMDUMP LBL_CF LBL_HF NETMAP ZEEKCTL OPTIONS_SUB= yes BROCCOLI_DESC= Build support for libbroccoli communications (DEPRECATED) -BROCTL_DESC= BroControl support (implies BROKER and IPSUMDUMP) BROKER_DESC= Enable the Broker communication library GEOIP2_DESC= Build with GeoIP2 (MaxMindDB) support IPSUMDUMP_DESC= Enables traffic summaries @@ -64,16 +64,11 @@ LBL_CF_DESC= Unix time to formated time/date filter su LBL_HF_DESC= Address to hostname filter support NETMAP_DESC= Native Netmap Packet IOSource for Bro PERFTOOLS_DESC= Use Perftools to improve memory & CPU usage +ZEEKCTL_DESC= ZeekControl support (implies BROKER and IPSUMDUMP) -BROCTL_IMPLIES= BROKER IPSUMDUMP +ZEEKCTL_IMPLIES= BROKER IPSUMDUMP BROCCOLI_LIB_DEPENDS= libbroccoli.so:security/broccoli -BROCTL_BUILD_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ - ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} \ - swig3.0:devel/swig30 -BROCTL_RUN_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ - ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} -BROCTL_CMAKE_BOOL= INSTALL_BROCTL GEOIP2_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb IPSUMDUMP_BUILD_DEPENDS=ipsumdump:net/ipsumdump IPSUMDUMP_RUN_DEPENDS= ipsumdump:net/ipsumdump @@ -82,40 +77,46 @@ BROKER_CMAKE_BOOL= ENABLE_BROKER DEBUG_CMAKE_BOOL= ENABLE_DEBUG LBL_HF_RUN_DEPENDS= ${LOCALBASE}/bin/hf:sysutils/lbl-hf LBL_CF_RUN_DEPENDS= ${LOCALBASE}/bin/cf:sysutils/lbl-cf -NETMAP_GH_TUPLE= bro:bro-netmap:cf88debf487b31ab30dc3b5bac64783b4e49997e:bro_netmap +NETMAP_GH_TUPLE= bro:bro-netmap:f3620df:bro_netmap NETMAP_USE= GITHUB=nodefault PERFTOOLS_CMAKE_BOOL= ENABLE_PERFTOOLS PERFTOOLS_RUN_DEPENDS= ${LOCALBASE}/bin/perftools-pprof:devel/google-perftools PYTHON_BUILD_DEPENDS= swig3.0:devel/swig30 +ZEEKCTL_BUILD_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ + ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} \ + swig3.0:devel/swig30 +ZEEKCTL_RUN_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ + ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} +ZEEKCTL_CMAKE_BOOL= INSTALL_ZEEKCTL .include -.if ${PORT_OPTIONS:MBROCTL} -USE_RC_SUBR= bro +.if ${PORT_OPTIONS:MZEEKCTL} +USE_RC_SUBR= zeek .endif -post-install-BROCTL-on: +post-install-ZEEKCTL-on: ${MKDIR} ${STAGEDIR}${PREFIX}/logs ${MKDIR} ${STAGEDIR}${PREFIX}/spool/tmp ${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/auto ${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/site -.for F in broctl.cfg networks.cfg node.cfg +.for F in zeekctl.cfg networks.cfg node.cfg ${MV} ${STAGEDIR}${PREFIX}/etc/${F} ${STAGEDIR}${PREFIX}/etc/${F}.example .endfor - ${RM} ${STAGEDIR}${PREFIX}/share/broctl/scripts/broctl-config.sh - ${LN} -s ../../../spool/broctl-config.sh \ - ${STAGEDIR}${PREFIX}/share/broctl/scripts/broctl-config.sh + ${RM} ${STAGEDIR}${PREFIX}/share/zeekctl/scripts/zeekctl-config.sh + ${LN} -s ../../../spool/zeekctl-config.sh \ + ${STAGEDIR}${PREFIX}/share/zeekctl/scripts/zeekctl-config.sh post-install: - ${RM} -r ${STAGEDIR}${PREFIX}/share/bro/cmake + ${RM} -r ${STAGEDIR}${PREFIX}/share/zeek/cmake -pre-install-BROCTL-on: +pre-install-ZEEKCTL-on: ${MKDIR} ${STAGEDIR}${PREFIX}/etc/rc.d post-build-NETMAP-on: ${LN} -s ../.build ${WRKSRC}/build (cd ${WRKSRC_bro_netmap} && ./configure --bro-dist=${WRKSRC} \ - --install-root=${STAGEDIR}${PREFIX}/lib/bro/plugins && \ + --install-root=${STAGEDIR}${PREFIX}/lib/zeek/plugins && \ make && make install) .include Modified: head/security/zeek/distinfo ============================================================================== --- head/security/bro/distinfo Thu Nov 14 22:48:31 2019 (r517623) +++ head/security/zeek/distinfo Sun Nov 17 01:03:04 2019 (r517788) @@ -1,5 +1,5 @@ -TIMESTAMP = 1568760632 -SHA256 (bro-2.6.4.tar.gz) = a47a9cdcef0ea14d5f70c390ab266f0333063ff96f3869a5f1609581a1d1ceb7 -SIZE (bro-2.6.4.tar.gz) = 28481281 -SHA256 (bro-bro-netmap-cf88debf487b31ab30dc3b5bac64783b4e49997e_GH0.tar.gz) = 383423f92932c3ef244194954708b3a237b4f37ebc358014f51dcb3b9786896b -SIZE (bro-bro-netmap-cf88debf487b31ab30dc3b5bac64783b4e49997e_GH0.tar.gz) = 24630 +TIMESTAMP = 1573594504 +SHA256 (zeek-3.0.0.tar.gz) = b552940a14132bcbbd9afdf6476ec615b5a44a6d15f78b2cdc15860fa02bff9a +SIZE (zeek-3.0.0.tar.gz) = 29252635 +SHA256 (bro-bro-netmap-f3620df_GH0.tar.gz) = e51f420781c9a01b0494f93d82f94a1b045725c1cff406c33887974a9940c655 +SIZE (bro-bro-netmap-f3620df_GH0.tar.gz) = 24661 Copied and modified: head/security/zeek/files/zeek.in (from r517623, head/security/bro/files/bro.in) ============================================================================== --- head/security/bro/files/bro.in Thu Nov 14 22:48:31 2019 (r517623, copy source) +++ head/security/zeek/files/zeek.in Sun Nov 17 01:03:04 2019 (r517788) @@ -3,78 +3,78 @@ # $FreeBSD$ # -# PROVIDE: bro +# PROVIDE: zeek # REQUIRE: NETWORKING # REQUIRE: LOGIN FILESYSTEMS # KEYWORD: shutdown . /etc/rc.subr -name="bro" +name="zeek" rcvar=`set_rcvar` node=$2 -start_cmd="bro_start" -stop_cmd="bro_stop" -restart_cmd="bro_restart" -deploy_cmd="bro_deploy" -install_cmd="bro_install" -cleanup_cmd="bro_cleanup" -restart_cmd="bro_restart" -status_cmd="bro_status" +start_cmd="zeek_start" +stop_cmd="zeek_stop" +restart_cmd="zeek_restart" +deploy_cmd="zeek_deploy" +install_cmd="zeek_install" +cleanup_cmd="zeek_cleanup" +restart_cmd="zeek_restart" +status_cmd="zeek_status" extra_commands="deploy install cleanup status restart" -: ${broctl_program:=%%PREFIX%%/bin/broctl} +: ${zeekctl_program:=%%PREFIX%%/bin/zeekctl} -bro_enable=${bro_enable-"NO"} +zeek_enable=${zeek_enable-"NO"} -bro_start() { +zeek_start() { if [ ! "${node}" ]; then - $broctl_program start + $zeekctl_program start else - $broctl_program start $node + $zeekctl_program start $node fi } bro_stop() { if [ ! "${node}" ]; then - $broctl_program stop + $zeekctl_program stop else - $broctl_program stop $node + $zeekctl_program stop $node fi } -bro_restart() { +zeek_restart() { if [ ! "${node}" ]; then - $broctl_program restart + $zeekctl_program restart else - $broctl_program restart $node + $zeekctl_program restart $node fi } -bro_deploy() { - $broctl_program deploy +zeek_deploy() { + $zeekctl_program deploy } -bro_install() { - $broctl_program install +zeek_install() { + $zeekctl_program install } -bro_cleanup() { +zeek_cleanup() { if [ ! "${node}" ]; then - $broctl_program cleanup + $zeekctl_program cleanup else - $broctl_program cleanup ${node} + $zeekctl_program cleanup ${node} fi } -bro_status() { - $broctl_program status +zeek_status() { + $zeekctl_program status } load_rc_config $name Modified: head/security/zeek/pkg-descr ============================================================================== --- head/security/bro/pkg-descr Thu Nov 14 22:48:31 2019 (r517623) +++ head/security/zeek/pkg-descr Sun Nov 17 01:03:04 2019 (r517788) @@ -1,13 +1,15 @@ -Bro is an open-source, Unix-based Network Intrusion Detection System (NIDS) -that passively monitors network traffic and looks for suspicious activity. -Bro detects intrusions by first parsing network traffic to extract its -application-level semantics and then executing event-oriented analyzers that -compare the activity with patterns deemed troublesome. Its analysis includes -detection of specific attacks (including those defined by signatures, but -also those defined in terms of events) and unusual activities (e.g., certain -hosts connecting to certain services, or patterns of failed connection -attempts). +Zeek (formerly known as Bro) is an open-source, Unix-based Network +Intrusion Detection System (NIDS) that passively monitors network +traffic and looks for suspicious activity. Zeek detects intrusions +by first parsing network traffic to extract its application-level +semantics and then executing event-oriented analyzers that compare +the activity with patterns deemed troublesome. Its analysis includes +detection of specific attacks (including those defined by signatures, +but also those defined in terms of events) and unusual activities +(e.g., certain hosts connecting to certain services, or patterns +of failed connection attempts). -Bro is documented in the USENIX 1998 Security Conference proceedings. +Zeek is documented in the USENIX 1998 Security Conference proceedings +(as Bro). -WWW: https://www.bro.org/ +WWW: https://www.zeek.org/ Modified: head/security/zeek/pkg-plist ============================================================================== --- head/security/bro/pkg-plist Thu Nov 14 22:48:31 2019 (r517623) +++ head/security/zeek/pkg-plist Sun Nov 17 01:03:04 2019 (r517788) @@ -1,576 +1,36 @@ -@postexec chown %%BROUSER%%:%%BROGROUP%% %D/logs -%%BROCTL%%@postexec chown %%BROUSER%%:%%BROGROUP%% %D/spool -%%BROCTL%%@postexec chown %%BROUSER%%:%%BROGROUP%% %D/spool/tmp -%%BROCTL%%@postexec chown -R %%BROUSER%%:%%BROGROUP%% %D/spool/installed-scripts-do-not-touch +@postexec chown %%ZEEKUSER%%:%%ZEEKGROUP%% %D/logs +%%ZEEKCTL%%@postexec chown %%ZEEKUSER%%:%%ZEEKGROUP%% %D/spool +%%ZEEKCTL%%@postexec chown %%ZEEKUSER%%:%%ZEEKGROUP%% %D/spool/tmp +%%ZEEKCTL%%@postexec chown -R %%ZEEKUSER%%:%%ZEEKGROUP%% %D/spool/installed-scripts-do-not-touch bin/bifcl bin/binpac bin/bro bin/bro-config bin/bro-cut -%%BROCTL%%bin/broctl -%%BROCTL%%bin/capstats -%%BROCTL%%bin/trace-summary -%%BROCTL%%@preunexec if cmp -s %D/etc/broctl.cfg.example %D/etc/broctl.cfg ; then rm -f %D/etc/broctl.cfg; fi -%%BROCTL%%etc/broctl.cfg.example -%%BROCTL%%@postexec if [ ! -f %D/etc/broctl.cfg ] ; then cp -p %D/etc/broctl.cfg.example %D/etc/broctl.cfg; fi -%%BROCTL%%@preunexec if cmp -s %D/etc/networks.cfg.example %D/etc/networks.cfg ; then rm -f %D/etc/networks.cfg; fi -%%BROCTL%%etc/networks.cfg.example -%%BROCTL%%@postexec if [ ! -f %D/etc/networks.cfg ] ; then cp -p %D/etc/networks.cfg.example %D/etc/networks.cfg; fi -%%BROCTL%%@preunexec if cmp -s %D/etc/node.cfg.example %D/etc/node.cfg ; then rm -f %D/etc/node.cfg; fi -%%BROCTL%%etc/node.cfg.example -%%BROCTL%%@postexec if [ ! -f %D/etc/node.cfg ] ; then cp -p %D/etc/node.cfg.example %D/etc/node.cfg; fi +bin/broctl +%%ZEEKCTL%%bin/capstats +bin/paraglob-test +%%ZEEKCTL%%bin/trace-summary +bin/zeek +bin/zeek-config +bin/zeek-cut +bin/zeek-wrapper +%%ZEEKCTL%%bin/zeekctl +%%ZEEKCTL%%@preunexec if cmp -s %D/etc/networks.cfg.example %D/etc/networks.cfg ; then rm -f %D/etc/networks.cfg; fi +%%ZEEKCTL%%etc/networks.cfg.example +%%ZEEKCTL%%@postexec if [ ! -f %D/etc/networks.cfg ] ; then cp -p %D/etc/networks.cfg.example %D/etc/networks.cfg; fi +%%ZEEKCTL%%@preunexec if cmp -s %D/etc/node.cfg.example %D/etc/node.cfg ; then rm -f %D/etc/node.cfg; fi +%%ZEEKCTL%%etc/node.cfg.example +%%ZEEKCTL%%@postexec if [ ! -f %D/etc/node.cfg ] ; then cp -p %D/etc/node.cfg.example %D/etc/node.cfg; fi +%%ZEEKCTL%%@preunexec if cmp -s %D/etc/zeekctl.cfg.example %D/etc/zeekctl.cfg ; then rm -f %D/etc/zeekctl.cfg; fi +%%ZEEKCTL%%etc/zeekctl.cfg.example +%%ZEEKCTL%%@postexec if [ ! -f %D/etc/zeekctl.cfg ] ; then cp -p %D/etc/zeekctl.cfg.example %D/etc/zeekctl.cfg; fi include/binpac/binpac.h include/binpac/binpac_analyzer.h include/binpac/binpac_buffer.h include/binpac/binpac_bytestring.h include/binpac/binpac_exception.h include/binpac/binpac_regex.h -include/bro/3rdparty/sqlite3.h -include/bro/Anon.h -include/bro/Attr.h -include/bro/Base64.h -include/bro/BroList.h -include/bro/BroString.h -include/bro/Brofiler.h -include/bro/CCL.h -include/bro/ChunkedIO.h -include/bro/CompHash.h -include/bro/Conn.h -include/bro/Continuation.h -include/bro/ConvertUTF.h -include/bro/DFA.h -include/bro/DNS_Mgr.h -include/bro/DbgBreakpoint.h -include/bro/DbgDisplay.h -include/bro/DbgWatch.h -include/bro/Debug.h -include/bro/DebugCmdInfoConstants.h -include/bro/DebugCmds.h -include/bro/DebugLogger.h -include/bro/Desc.h -include/bro/Dict.h -include/bro/Discard.h -include/bro/EquivClass.h -include/bro/Event.h -include/bro/EventHandler.h -include/bro/EventLauncher.h -include/bro/EventRegistry.h -include/bro/Expr.h -include/bro/File.h -include/bro/Flare.h -include/bro/Frag.h -include/bro/Frame.h -include/bro/Func.h -include/bro/Hash.h -include/bro/ID.h -include/bro/IP.h -include/bro/IPAddr.h -include/bro/IntSet.h -include/bro/List.h -include/bro/NFA.h -include/bro/Net.h -include/bro/NetVar.h -include/bro/OSFinger.h -include/bro/Obj.h -include/bro/Op.h -include/bro/OpaqueVal.h -include/bro/PacketDumper.h -include/bro/PacketFilter.h -include/bro/PersistenceSerializer.h -include/bro/Pipe.h -include/bro/PolicyFile.h -include/bro/PrefixTable.h -include/bro/PriorityQueue.h -include/bro/Queue.h -include/bro/RE.h -include/bro/RandTest.h -include/bro/Reassem.h -include/bro/RemoteSerializer.h -include/bro/Reporter.h -include/bro/Rule.h -include/bro/RuleAction.h -include/bro/RuleCondition.h -include/bro/RuleMatcher.h -include/bro/Scope.h -include/bro/SerialInfo.h -include/bro/SerialObj.h -include/bro/SerialTypes.h -include/bro/SerializationFormat.h -include/bro/Serializer.h -include/bro/Sessions.h -include/bro/SmithWaterman.h -include/bro/StateAccess.h -include/bro/Stats.h -include/bro/Stmt.h -include/bro/StmtEnums.h -include/bro/Tag.h -include/bro/Timer.h -include/bro/Traverse.h -include/bro/TraverseTypes.h -include/bro/Trigger.h -include/bro/TunnelEncapsulation.h -include/bro/Type.h -include/bro/UID.h -include/bro/Val.h -include/bro/Var.h -include/bro/analyzer/Analyzer.h -include/bro/analyzer/Component.h -include/bro/analyzer/Manager.h -include/bro/analyzer/Tag.h -include/bro/analyzer/analyzer.bif.h -include/bro/analyzer/protocol/arp/ARP.h -include/bro/analyzer/protocol/arp/events.bif.h -include/bro/analyzer/protocol/asn1/asn1.pac -include/bro/analyzer/protocol/ayiya/AYIYA.h -include/bro/analyzer/protocol/ayiya/ayiya-analyzer.pac -include/bro/analyzer/protocol/ayiya/ayiya-protocol.pac -include/bro/analyzer/protocol/ayiya/ayiya.pac -include/bro/analyzer/protocol/backdoor/BackDoor.h -include/bro/analyzer/protocol/backdoor/events.bif.h -include/bro/analyzer/protocol/bittorrent/BitTorrent.h -include/bro/analyzer/protocol/bittorrent/BitTorrentTracker.h -include/bro/analyzer/protocol/bittorrent/bittorrent-analyzer.pac -include/bro/analyzer/protocol/bittorrent/bittorrent-protocol.pac -include/bro/analyzer/protocol/bittorrent/bittorrent.pac -include/bro/analyzer/protocol/bittorrent/events.bif.h -include/bro/analyzer/protocol/conn-size/ConnSize.h -include/bro/analyzer/protocol/conn-size/events.bif.h -include/bro/analyzer/protocol/conn-size/functions.bif.h -include/bro/analyzer/protocol/dce-rpc/DCE_RPC.h -include/bro/analyzer/protocol/dce-rpc/consts.bif.h -include/bro/analyzer/protocol/dce-rpc/dce_rpc-analyzer.pac -include/bro/analyzer/protocol/dce-rpc/dce_rpc-auth.pac -include/bro/analyzer/protocol/dce-rpc/dce_rpc-protocol.pac -include/bro/analyzer/protocol/dce-rpc/dce_rpc.pac -include/bro/analyzer/protocol/dce-rpc/endpoint-atsvc.pac -include/bro/analyzer/protocol/dce-rpc/endpoint-epmapper.pac -include/bro/analyzer/protocol/dce-rpc/events.bif.h -include/bro/analyzer/protocol/dce-rpc/types.bif.h -include/bro/analyzer/protocol/dhcp/DHCP.h -include/bro/analyzer/protocol/dhcp/dhcp-analyzer.pac -include/bro/analyzer/protocol/dhcp/dhcp-options.pac -include/bro/analyzer/protocol/dhcp/dhcp-protocol.pac -include/bro/analyzer/protocol/dhcp/dhcp.pac -include/bro/analyzer/protocol/dhcp/events.bif.h -include/bro/analyzer/protocol/dhcp/types.bif.h -include/bro/analyzer/protocol/dnp3/DNP3.h -include/bro/analyzer/protocol/dnp3/dnp3-analyzer.pac -include/bro/analyzer/protocol/dnp3/dnp3-objects.pac -include/bro/analyzer/protocol/dnp3/dnp3-protocol.pac -include/bro/analyzer/protocol/dnp3/dnp3.pac -include/bro/analyzer/protocol/dnp3/events.bif.h -include/bro/analyzer/protocol/dns/DNS.h -include/bro/analyzer/protocol/dns/events.bif.h -include/bro/analyzer/protocol/file/File.h -include/bro/analyzer/protocol/file/events.bif.h -include/bro/analyzer/protocol/finger/Finger.h -include/bro/analyzer/protocol/finger/events.bif.h -include/bro/analyzer/protocol/ftp/FTP.h -include/bro/analyzer/protocol/ftp/events.bif.h -include/bro/analyzer/protocol/ftp/functions.bif.h -include/bro/analyzer/protocol/gnutella/Gnutella.h -include/bro/analyzer/protocol/gnutella/events.bif.h -include/bro/analyzer/protocol/gssapi/GSSAPI.h -include/bro/analyzer/protocol/gssapi/events.bif.h -include/bro/analyzer/protocol/gssapi/gssapi-analyzer.pac -include/bro/analyzer/protocol/gssapi/gssapi-protocol.pac -include/bro/analyzer/protocol/gssapi/gssapi.pac -include/bro/analyzer/protocol/gtpv1/GTPv1.h -include/bro/analyzer/protocol/gtpv1/events.bif.h -include/bro/analyzer/protocol/gtpv1/gtpv1-analyzer.pac -include/bro/analyzer/protocol/gtpv1/gtpv1-protocol.pac -include/bro/analyzer/protocol/gtpv1/gtpv1.pac -include/bro/analyzer/protocol/http/HTTP.h -include/bro/analyzer/protocol/http/events.bif.h -include/bro/analyzer/protocol/http/functions.bif.h -include/bro/analyzer/protocol/icmp/ICMP.h -include/bro/analyzer/protocol/icmp/events.bif.h -include/bro/analyzer/protocol/ident/Ident.h -include/bro/analyzer/protocol/ident/events.bif.h -include/bro/analyzer/protocol/imap/IMAP.h -include/bro/analyzer/protocol/imap/events.bif.h -include/bro/analyzer/protocol/imap/imap-analyzer.pac -include/bro/analyzer/protocol/imap/imap-protocol.pac -include/bro/analyzer/protocol/imap/imap.pac -include/bro/analyzer/protocol/interconn/InterConn.h -include/bro/analyzer/protocol/interconn/events.bif.h -include/bro/analyzer/protocol/irc/IRC.h -include/bro/analyzer/protocol/irc/events.bif.h -include/bro/analyzer/protocol/krb/KRB.h -include/bro/analyzer/protocol/krb/KRB_TCP.h -include/bro/analyzer/protocol/krb/events.bif.h -include/bro/analyzer/protocol/krb/krb-analyzer.pac -include/bro/analyzer/protocol/krb/krb-asn1.pac -include/bro/analyzer/protocol/krb/krb-defs.pac -include/bro/analyzer/protocol/krb/krb-padata.pac -include/bro/analyzer/protocol/krb/krb-protocol.pac -include/bro/analyzer/protocol/krb/krb-types.pac -include/bro/analyzer/protocol/krb/krb.pac -include/bro/analyzer/protocol/krb/krb_TCP.pac -include/bro/analyzer/protocol/krb/types.bif.h -include/bro/analyzer/protocol/login/Login.h -include/bro/analyzer/protocol/login/NVT.h -include/bro/analyzer/protocol/login/RSH.h -include/bro/analyzer/protocol/login/Rlogin.h -include/bro/analyzer/protocol/login/Telnet.h -include/bro/analyzer/protocol/login/events.bif.h -include/bro/analyzer/protocol/login/functions.bif.h -include/bro/analyzer/protocol/mime/MIME.h -include/bro/analyzer/protocol/mime/events.bif.h -include/bro/analyzer/protocol/modbus/Modbus.h -include/bro/analyzer/protocol/modbus/events.bif.h -include/bro/analyzer/protocol/modbus/modbus-analyzer.pac -include/bro/analyzer/protocol/modbus/modbus-protocol.pac -include/bro/analyzer/protocol/modbus/modbus.pac -include/bro/analyzer/protocol/mysql/MySQL.h -include/bro/analyzer/protocol/mysql/events.bif.h -include/bro/analyzer/protocol/mysql/mysql-analyzer.pac -include/bro/analyzer/protocol/mysql/mysql-protocol.pac -include/bro/analyzer/protocol/mysql/mysql.pac -include/bro/analyzer/protocol/ncp/NCP.h -include/bro/analyzer/protocol/ncp/consts.bif.h -include/bro/analyzer/protocol/ncp/events.bif.h -include/bro/analyzer/protocol/ncp/ncp.pac -include/bro/analyzer/protocol/netbios/NetbiosSSN.h -include/bro/analyzer/protocol/netbios/events.bif.h -include/bro/analyzer/protocol/netbios/functions.bif.h -include/bro/analyzer/protocol/ntlm/NTLM.h -include/bro/analyzer/protocol/ntlm/events.bif.h -include/bro/analyzer/protocol/ntlm/ntlm-analyzer.pac -include/bro/analyzer/protocol/ntlm/ntlm-protocol.pac -include/bro/analyzer/protocol/ntlm/ntlm.pac -include/bro/analyzer/protocol/ntlm/types.bif.h -include/bro/analyzer/protocol/ntp/NTP.h -include/bro/analyzer/protocol/ntp/events.bif.h -include/bro/analyzer/protocol/pia/PIA.h -include/bro/analyzer/protocol/pop3/POP3.h -include/bro/analyzer/protocol/pop3/events.bif.h -include/bro/analyzer/protocol/radius/RADIUS.h -include/bro/analyzer/protocol/radius/events.bif.h -include/bro/analyzer/protocol/radius/radius-analyzer.pac -include/bro/analyzer/protocol/radius/radius-protocol.pac -include/bro/analyzer/protocol/radius/radius.pac -include/bro/analyzer/protocol/rdp/RDP.h -include/bro/analyzer/protocol/rdp/events.bif.h -include/bro/analyzer/protocol/rdp/rdp-analyzer.pac -include/bro/analyzer/protocol/rdp/rdp-protocol.pac -include/bro/analyzer/protocol/rdp/rdp.pac -include/bro/analyzer/protocol/rdp/types.bif.h -include/bro/analyzer/protocol/rfb/RFB.h -include/bro/analyzer/protocol/rfb/events.bif.h -include/bro/analyzer/protocol/rfb/rfb-analyzer.pac -include/bro/analyzer/protocol/rfb/rfb-protocol.pac -include/bro/analyzer/protocol/rfb/rfb.pac -include/bro/analyzer/protocol/rpc/MOUNT.h -include/bro/analyzer/protocol/rpc/NFS.h -include/bro/analyzer/protocol/rpc/Portmap.h -include/bro/analyzer/protocol/rpc/RPC.h -include/bro/analyzer/protocol/rpc/XDR.h -include/bro/analyzer/protocol/rpc/events.bif.h -include/bro/analyzer/protocol/sip/SIP.h -include/bro/analyzer/protocol/sip/SIP_TCP.h -include/bro/analyzer/protocol/sip/events.bif.h -include/bro/analyzer/protocol/sip/sip-analyzer.pac -include/bro/analyzer/protocol/sip/sip-protocol.pac -include/bro/analyzer/protocol/sip/sip.pac -include/bro/analyzer/protocol/sip/sip_TCP.pac -include/bro/analyzer/protocol/smb/SMB.h -include/bro/analyzer/protocol/smb/consts.bif.h -include/bro/analyzer/protocol/smb/events.bif.h -include/bro/analyzer/protocol/smb/smb-common.pac -include/bro/analyzer/protocol/smb/smb-gssapi.pac -include/bro/analyzer/protocol/smb/smb-mailslot.pac -include/bro/analyzer/protocol/smb/smb-pipe.pac -include/bro/analyzer/protocol/smb/smb-strings.pac -include/bro/analyzer/protocol/smb/smb-time.pac -include/bro/analyzer/protocol/smb/smb.pac -include/bro/analyzer/protocol/smb/smb1-com-check-directory.pac -include/bro/analyzer/protocol/smb/smb1-com-close.pac -include/bro/analyzer/protocol/smb/smb1-com-create-directory.pac -include/bro/analyzer/protocol/smb/smb1-com-echo.pac -include/bro/analyzer/protocol/smb/smb1-com-locking-andx.pac -include/bro/analyzer/protocol/smb/smb1-com-logoff-andx.pac -include/bro/analyzer/protocol/smb/smb1-com-negotiate.pac -include/bro/analyzer/protocol/smb/smb1-com-nt-cancel.pac -include/bro/analyzer/protocol/smb/smb1-com-nt-create-andx.pac -include/bro/analyzer/protocol/smb/smb1-com-nt-transact.pac -include/bro/analyzer/protocol/smb/smb1-com-query-information.pac -include/bro/analyzer/protocol/smb/smb1-com-read-andx.pac -include/bro/analyzer/protocol/smb/smb1-com-session-setup-andx.pac -include/bro/analyzer/protocol/smb/smb1-com-transaction-secondary.pac -include/bro/analyzer/protocol/smb/smb1-com-transaction.pac -include/bro/analyzer/protocol/smb/smb1-com-transaction2-secondary.pac -include/bro/analyzer/protocol/smb/smb1-com-transaction2.pac -include/bro/analyzer/protocol/smb/smb1-com-tree-connect-andx.pac -include/bro/analyzer/protocol/smb/smb1-com-tree-disconnect.pac -include/bro/analyzer/protocol/smb/smb1-com-write-andx.pac -include/bro/analyzer/protocol/smb/smb1-protocol.pac -include/bro/analyzer/protocol/smb/smb1_com_check_directory.bif.h -include/bro/analyzer/protocol/smb/smb1_com_close.bif.h -include/bro/analyzer/protocol/smb/smb1_com_create_directory.bif.h -include/bro/analyzer/protocol/smb/smb1_com_echo.bif.h -include/bro/analyzer/protocol/smb/smb1_com_logoff_andx.bif.h -include/bro/analyzer/protocol/smb/smb1_com_negotiate.bif.h -include/bro/analyzer/protocol/smb/smb1_com_nt_cancel.bif.h -include/bro/analyzer/protocol/smb/smb1_com_nt_create_andx.bif.h -include/bro/analyzer/protocol/smb/smb1_com_query_information.bif.h -include/bro/analyzer/protocol/smb/smb1_com_read_andx.bif.h -include/bro/analyzer/protocol/smb/smb1_com_session_setup_andx.bif.h -include/bro/analyzer/protocol/smb/smb1_com_transaction.bif.h -include/bro/analyzer/protocol/smb/smb1_com_transaction2.bif.h -include/bro/analyzer/protocol/smb/smb1_com_transaction2_secondary.bif.h -include/bro/analyzer/protocol/smb/smb1_com_transaction_secondary.bif.h -include/bro/analyzer/protocol/smb/smb1_com_tree_connect_andx.bif.h -include/bro/analyzer/protocol/smb/smb1_com_tree_disconnect.bif.h -include/bro/analyzer/protocol/smb/smb1_com_write_andx.bif.h -include/bro/analyzer/protocol/smb/smb1_events.bif.h -include/bro/analyzer/protocol/smb/smb2-com-close.pac -include/bro/analyzer/protocol/smb/smb2-com-create.pac -include/bro/analyzer/protocol/smb/smb2-com-ioctl.pac -include/bro/analyzer/protocol/smb/smb2-com-lock.pac -include/bro/analyzer/protocol/smb/smb2-com-negotiate.pac -include/bro/analyzer/protocol/smb/smb2-com-read.pac -include/bro/analyzer/protocol/smb/smb2-com-session-setup.pac -include/bro/analyzer/protocol/smb/smb2-com-set-info.pac -include/bro/analyzer/protocol/smb/smb2-com-tree-connect.pac -include/bro/analyzer/protocol/smb/smb2-com-tree-disconnect.pac -include/bro/analyzer/protocol/smb/smb2-com-write.pac -include/bro/analyzer/protocol/smb/smb2-protocol.pac -include/bro/analyzer/protocol/smb/smb2_com_close.bif.h -include/bro/analyzer/protocol/smb/smb2_com_create.bif.h -include/bro/analyzer/protocol/smb/smb2_com_negotiate.bif.h -include/bro/analyzer/protocol/smb/smb2_com_read.bif.h -include/bro/analyzer/protocol/smb/smb2_com_session_setup.bif.h -include/bro/analyzer/protocol/smb/smb2_com_set_info.bif.h -include/bro/analyzer/protocol/smb/smb2_com_tree_connect.bif.h -include/bro/analyzer/protocol/smb/smb2_com_tree_disconnect.bif.h -include/bro/analyzer/protocol/smb/smb2_com_write.bif.h -include/bro/analyzer/protocol/smb/smb2_events.bif.h -include/bro/analyzer/protocol/smb/types.bif.h -include/bro/analyzer/protocol/smtp/SMTP.h -include/bro/analyzer/protocol/smtp/events.bif.h -include/bro/analyzer/protocol/smtp/functions.bif.h -include/bro/analyzer/protocol/snmp/SNMP.h -include/bro/analyzer/protocol/snmp/events.bif.h -include/bro/analyzer/protocol/snmp/snmp-analyzer.pac -include/bro/analyzer/protocol/snmp/snmp-protocol.pac -include/bro/analyzer/protocol/snmp/snmp.pac -include/bro/analyzer/protocol/snmp/types.bif.h -include/bro/analyzer/protocol/socks/SOCKS.h -include/bro/analyzer/protocol/socks/events.bif.h -include/bro/analyzer/protocol/socks/socks-analyzer.pac -include/bro/analyzer/protocol/socks/socks-protocol.pac -include/bro/analyzer/protocol/socks/socks.pac -include/bro/analyzer/protocol/ssh/SSH.h -include/bro/analyzer/protocol/ssh/consts.pac -include/bro/analyzer/protocol/ssh/events.bif.h -include/bro/analyzer/protocol/ssh/ssh-analyzer.pac -include/bro/analyzer/protocol/ssh/ssh-protocol.pac -include/bro/analyzer/protocol/ssh/ssh.pac -include/bro/analyzer/protocol/ssh/types.bif.h -include/bro/analyzer/protocol/ssl/DTLS.h -include/bro/analyzer/protocol/ssl/SSL.h -include/bro/analyzer/protocol/ssl/dtls-analyzer.pac -include/bro/analyzer/protocol/ssl/dtls-protocol.pac -include/bro/analyzer/protocol/ssl/dtls.pac -include/bro/analyzer/protocol/ssl/events.bif.h -include/bro/analyzer/protocol/ssl/functions.bif.h -include/bro/analyzer/protocol/ssl/proc-certificate.pac -include/bro/analyzer/protocol/ssl/proc-client-hello.pac -include/bro/analyzer/protocol/ssl/proc-server-hello.pac -include/bro/analyzer/protocol/ssl/ssl-analyzer.pac -include/bro/analyzer/protocol/ssl/ssl-defs.pac -include/bro/analyzer/protocol/ssl/ssl-dtls-analyzer.pac -include/bro/analyzer/protocol/ssl/ssl-dtls-protocol.pac -include/bro/analyzer/protocol/ssl/ssl-protocol.pac -include/bro/analyzer/protocol/ssl/ssl.pac -include/bro/analyzer/protocol/ssl/tls-handshake-analyzer.pac -include/bro/analyzer/protocol/ssl/tls-handshake-protocol.pac -include/bro/analyzer/protocol/ssl/tls-handshake-signed_certificate_timestamp.pac -include/bro/analyzer/protocol/ssl/tls-handshake.pac -include/bro/analyzer/protocol/ssl/types.bif.h -include/bro/analyzer/protocol/stepping-stone/SteppingStone.h -include/bro/analyzer/protocol/stepping-stone/events.bif.h -include/bro/analyzer/protocol/syslog/Syslog.h -include/bro/analyzer/protocol/syslog/events.bif.h -include/bro/analyzer/protocol/syslog/syslog-analyzer.pac -include/bro/analyzer/protocol/syslog/syslog-protocol.pac -include/bro/analyzer/protocol/syslog/syslog.pac -include/bro/analyzer/protocol/tcp/ContentLine.h -include/bro/analyzer/protocol/tcp/Stats.h -include/bro/analyzer/protocol/tcp/TCP.h -include/bro/analyzer/protocol/tcp/TCP_Endpoint.h -include/bro/analyzer/protocol/tcp/TCP_Flags.h -include/bro/analyzer/protocol/tcp/TCP_Reassembler.h -include/bro/analyzer/protocol/tcp/events.bif.h -include/bro/analyzer/protocol/tcp/functions.bif.h -include/bro/analyzer/protocol/teredo/Teredo.h -include/bro/analyzer/protocol/teredo/events.bif.h -include/bro/analyzer/protocol/udp/UDP.h -include/bro/analyzer/protocol/udp/events.bif.h -include/bro/analyzer/protocol/xmpp/XMPP.h -include/bro/analyzer/protocol/xmpp/events.bif.h -include/bro/analyzer/protocol/xmpp/xmpp-analyzer.pac -include/bro/analyzer/protocol/xmpp/xmpp-protocol.pac -include/bro/analyzer/protocol/xmpp/xmpp.pac -include/bro/analyzer/protocol/zip/ZIP.h -include/bro/binpac-lib.pac -include/bro/binpac.pac -include/bro/binpac_bro-lib.pac -include/bro/binpac_bro.h -include/bro/bro-bif.h -include/bro/bro-config.h -include/bro/bro.bif.func_h -include/bro/bro.bif.netvar_h -include/bro/bro.pac -include/bro/bro_inet_ntop.h -include/bro/broker/Data.h -include/bro/broker/Manager.h -include/bro/broker/Store.h -include/bro/broker/comm.bif.h -include/bro/broker/data.bif.h -include/bro/broker/messaging.bif.h -include/bro/broker/store.bif.h -include/bro/broxygen/Configuration.h -include/bro/broxygen/IdentifierInfo.h -include/bro/broxygen/Info.h -include/bro/broxygen/Manager.h -include/bro/broxygen/PackageInfo.h -include/bro/broxygen/ReStructuredTextTable.h -include/bro/broxygen/ScriptInfo.h -include/bro/broxygen/Target.h -include/bro/broxygen/broxygen.bif.h -include/bro/broxygen/utils.h -include/bro/bsd-getopt-long.h -include/bro/const.bif.func_h -include/bro/const.bif.netvar_h -include/bro/cq.h -include/bro/digest.h -include/bro/event.bif.func_h -include/bro/event.bif.netvar_h -include/bro/file_analysis/Analyzer.h -include/bro/file_analysis/AnalyzerSet.h -include/bro/file_analysis/Component.h -include/bro/file_analysis/File.h -include/bro/file_analysis/FileReassembler.h -include/bro/file_analysis/FileTimer.h -include/bro/file_analysis/Manager.h -include/bro/file_analysis/Tag.h -include/bro/file_analysis/analyzer/data_event/DataEvent.h -include/bro/file_analysis/analyzer/entropy/Entropy.h -include/bro/file_analysis/analyzer/entropy/events.bif.h -include/bro/file_analysis/analyzer/extract/Extract.h -include/bro/file_analysis/analyzer/extract/events.bif.h -include/bro/file_analysis/analyzer/extract/functions.bif.h -include/bro/file_analysis/analyzer/hash/Hash.h -include/bro/file_analysis/analyzer/hash/events.bif.h -include/bro/file_analysis/analyzer/pe/PE.h -include/bro/file_analysis/analyzer/pe/events.bif.h -include/bro/file_analysis/analyzer/pe/pe-analyzer.pac -include/bro/file_analysis/analyzer/pe/pe-file-headers.pac -include/bro/file_analysis/analyzer/pe/pe-file-idata.pac -include/bro/file_analysis/analyzer/pe/pe-file-types.pac -include/bro/file_analysis/analyzer/pe/pe-file.pac -include/bro/file_analysis/analyzer/pe/pe.pac -include/bro/file_analysis/analyzer/unified2/Unified2.h -include/bro/file_analysis/analyzer/unified2/events.bif.h -include/bro/file_analysis/analyzer/unified2/types.bif.h -include/bro/file_analysis/analyzer/unified2/unified2-analyzer.pac -include/bro/file_analysis/analyzer/unified2/unified2-file.pac -include/bro/file_analysis/analyzer/unified2/unified2.pac -include/bro/file_analysis/analyzer/x509/OCSP.h -include/bro/file_analysis/analyzer/x509/X509.h -include/bro/file_analysis/analyzer/x509/X509Common.h -include/bro/file_analysis/analyzer/x509/events.bif.h -include/bro/file_analysis/analyzer/x509/functions.bif.h -include/bro/file_analysis/analyzer/x509/ocsp_events.bif.h -include/bro/file_analysis/analyzer/x509/types.bif.h -include/bro/file_analysis/analyzer/x509/x509-extension.pac -include/bro/file_analysis/analyzer/x509/x509-signed_certificate_timestamp.pac -include/bro/file_analysis/file_analysis.bif.h -include/bro/input.h -include/bro/input/Component.h -include/bro/input/Manager.h -include/bro/input/ReaderBackend.h -include/bro/input/ReaderFrontend.h -include/bro/input/Tag.h -include/bro/input/input.bif.h -include/bro/input/readers/ascii/Ascii.h -include/bro/input/readers/ascii/ascii.bif.h -include/bro/input/readers/benchmark/Benchmark.h -include/bro/input/readers/benchmark/benchmark.bif.h -include/bro/input/readers/binary/Binary.h -include/bro/input/readers/binary/binary.bif.h -include/bro/input/readers/config/Config.h -include/bro/input/readers/config/config.bif.h -include/bro/input/readers/raw/Plugin.h -include/bro/input/readers/raw/Raw.h -include/bro/input/readers/raw/raw.bif.h -include/bro/input/readers/sqlite/SQLite.h -include/bro/input/readers/sqlite/sqlite.bif.h -include/bro/iosource/BPF_Program.h -include/bro/iosource/Component.h -include/bro/iosource/FD_Set.h -include/bro/iosource/IOSource.h -include/bro/iosource/Manager.h -include/bro/iosource/Packet.h -include/bro/iosource/PktDumper.h -include/bro/iosource/PktSrc.h -include/bro/iosource/pcap/Dumper.h -include/bro/iosource/pcap/Source.h -include/bro/iosource/pcap/pcap.bif.h -include/bro/logging/Component.h -include/bro/logging/Manager.h -include/bro/logging/Tag.h -include/bro/logging/WriterBackend.h -include/bro/logging/WriterFrontend.h -include/bro/logging/logging.bif.h -include/bro/logging/writers/ascii/Ascii.h -include/bro/logging/writers/ascii/ascii.bif.h -include/bro/logging/writers/none/None.h -include/bro/logging/writers/none/none.bif.h -include/bro/logging/writers/sqlite/SQLite.h -include/bro/logging/writers/sqlite/sqlite.bif.h -include/bro/modp_numtoa.h -include/bro/module_util.h -include/bro/nb_dns.h -include/bro/net_util.h -include/bro/option.bif.func_h -include/bro/option.bif.netvar_h -include/bro/patricia.h -include/bro/plugin/Component.h -include/bro/plugin/ComponentManager.h -include/bro/plugin/Manager.h -include/bro/plugin/Plugin.h -include/bro/plugin/TaggedComponent.h -include/bro/probabilistic/BitVector.h -include/bro/probabilistic/BloomFilter.h -include/bro/probabilistic/CardinalityCounter.h -include/bro/probabilistic/CounterVector.h -include/bro/probabilistic/Hasher.h -include/bro/probabilistic/Topk.h -include/bro/probabilistic/bloom-filter.bif.h -include/bro/probabilistic/cardinality-counter.bif.h -include/bro/probabilistic/top-k.bif.h -include/bro/reporter.bif.func_h -include/bro/reporter.bif.netvar_h -include/bro/setsignal.h -include/bro/siphash24.h -include/bro/stats.bif.func_h -include/bro/stats.bif.netvar_h -include/bro/strings.bif.func_h -include/bro/strings.bif.netvar_h -include/bro/threading/BasicThread.h -include/bro/threading/Formatter.h -include/bro/threading/Manager.h -include/bro/threading/MsgThread.h -include/bro/threading/Queue.h -include/bro/threading/SerialTypes.h -include/bro/threading/formatters/Ascii.h -include/bro/threading/formatters/JSON.h -include/bro/types.bif.func_h -include/bro/types.bif.netvar_h -include/bro/util.h %%BROKER%%include/broker/address.hh %%BROKER%%include/broker/api_flags.hh %%BROKER%%include/broker/atoms.hh @@ -624,6 +84,7 @@ include/bro/util.h %%BROKER%%include/broker/internal_command.hh %%BROKER%%include/broker/logger.hh %%BROKER%%include/broker/mailbox.hh +%%BROKER%%include/broker/message.hh %%BROKER%%include/broker/network_info.hh %%BROKER%%include/broker/none.hh %%BROKER%%include/broker/optional.hh @@ -644,6 +105,7 @@ include/bro/util.h %%BROKER%%include/broker/timeout.hh %%BROKER%%include/broker/topic.hh %%BROKER%%include/broker/version.hh +%%BROKER%%include/broker/zeek.hh %%BROKER%%include/caf/abstract_actor.hpp %%BROKER%%include/caf/abstract_channel.hpp %%BROKER%%include/caf/abstract_composable_behavior.hpp @@ -689,6 +151,7 @@ include/bro/util.h %%BROKER%%include/caf/config_option_adder.hpp %%BROKER%%include/caf/config_option_set.hpp %%BROKER%%include/caf/config_value.hpp +%%BROKER%%include/caf/cow_tuple.hpp %%BROKER%%include/caf/data_processor.hpp %%BROKER%%include/caf/decorator/sequencer.hpp %%BROKER%%include/caf/decorator/splitter.hpp @@ -738,6 +201,7 @@ include/bro/util.h %%BROKER%%include/caf/detail/is_one_of.hpp %%BROKER%%include/caf/detail/is_primitive_config_value.hpp %%BROKER%%include/caf/detail/limited_vector.hpp +%%BROKER%%include/caf/detail/log_level.hpp %%BROKER%%include/caf/detail/mask_bits.hpp %%BROKER%%include/caf/detail/merged_tuple.hpp %%BROKER%%include/caf/detail/message_data.hpp @@ -770,6 +234,7 @@ include/bro/util.h %%BROKER%%include/caf/detail/private_thread.hpp %%BROKER%%include/caf/detail/pseudo_tuple.hpp %%BROKER%%include/caf/detail/raw_access.hpp +%%BROKER%%include/caf/detail/ringbuffer.hpp %%BROKER%%include/caf/detail/ripemd_160.hpp %%BROKER%%include/caf/detail/safe_equal.hpp %%BROKER%%include/caf/detail/scope_guard.hpp @@ -780,6 +245,7 @@ include/bro/util.h %%BROKER%%include/caf/detail/simple_actor_clock.hpp %%BROKER%%include/caf/detail/socket_guard.hpp %%BROKER%%include/caf/detail/spawn_fwd.hpp +%%BROKER%%include/caf/detail/spawnable.hpp %%BROKER%%include/caf/detail/split_join.hpp %%BROKER%%include/caf/detail/squashed_int.hpp %%BROKER%%include/caf/detail/stream_distribution_tree.hpp @@ -921,6 +387,7 @@ include/bro/util.h %%BROKER%%include/caf/ipv4_subnet.hpp %%BROKER%%include/caf/ipv6_address.hpp %%BROKER%%include/caf/ipv6_subnet.hpp +%%BROKER%%include/caf/is_actor_handle.hpp %%BROKER%%include/caf/is_message_sink.hpp %%BROKER%%include/caf/is_timeout_or_catch_all.hpp %%BROKER%%include/caf/is_typed_actor.hpp @@ -983,7 +450,6 @@ include/bro/util.h %%BROKER%%include/caf/policy/categorized.hpp %%BROKER%%include/caf/policy/downstream_messages.hpp %%BROKER%%include/caf/policy/normal_messages.hpp -%%BROKER%%include/caf/policy/priority_aware.hpp %%BROKER%%include/caf/policy/profiled.hpp %%BROKER%%include/caf/policy/scheduler_policy.hpp %%BROKER%%include/caf/policy/tcp.hpp *** DIFF OUTPUT TRUNCATED AT 1000 LINES ***