Index: GIDs =================================================================== --- GIDs +++ GIDs @@ -722,7 +722,7 @@ bitcoin:*:779: zetacoin:*:780: monero:*:781: -# free: 782 +zeek:*:782 # free: 783 # free: 784 # free: 785 Index: UIDs =================================================================== --- UIDs +++ UIDs @@ -727,7 +727,7 @@ bitcoin:*:779:779::0:0:bitcoin Daemon:/var/db/bitcoin:/usr/sbin/nologin zetacoin:*:780:780::0:0:ZetaCoin Daemon:/nonexistent:/usr/sbin/nologin monero:*:781:781::0:0:Monero Daemon:/var/db/monero:/usr/sbin/nologin -# free: 782 +zeek:*:782:782::0:0:Zeek Network Security Monitor:/nonexistent:/usr/sbin/nologin # free: 783 # free: 784 # free: 785 Index: security/Makefile =================================================================== --- security/Makefile +++ security/Makefile @@ -1329,6 +1329,7 @@ SUBDIR += yubikey-personalization-gui SUBDIR += yubioath-desktop SUBDIR += zebedee + SUBDIR += zeek SUBDIR += zenmap SUBDIR += zeronet SUBDIR += zxid Index: security/zeek/Makefile =================================================================== --- security/zeek/Makefile +++ security/zeek/Makefile @@ -1,9 +1,8 @@ # Created by: David O'Brien # $FreeBSD$ -PORTNAME= bro -PORTVERSION= 2.6.4 -PORTREVISION= 1 +PORTNAME= zeek +PORTVERSION= 3.0.0 CATEGORIES= security MASTER_SITES= https://www.zeek.org/downloads/ DISTFILES= ${DISTNAME}${EXTRACT_SUFX} @@ -20,18 +19,18 @@ CMAKE_ARGS+= -DPYTHON_EXECUTABLE:PATH=${PYTHON_CMD} CXXFLAGS+= -std=c++11 -Wall -SHEBANG_FILES= aux/broctl/aux/trace-summary/trace-summary +SHEBANG_FILES= aux/zeekctl/aux/trace-summary/trace-summary SUB_FILES= pkg-message NO_MTREE= yes CMAKE_ARGS+= -GNinja \ -D CMAKE_INSTALL_PREFIX:PATH=${PREFIX} \ - -D BRO_ROOT_DIR:PATH=${PREFIX} \ - -D PY_MOD_INSTALL_DIR:PATH=${PREFIX}/lib/broctl \ - -D BRO_SCRIPT_INSTALL_PATH:PATH=${PREFIX}/share/bro \ - -D BRO_ETC_INSTALL_DIR:PATH=${PREFIX}/etc \ - -D BRO_MAN_INSTALL_PATH=${MANPREFIX}/man \ + -D ZEEK_ROOT_DIR:PATH=${PREFIX} \ + -D PY_MOD_INSTALL_DIR:PATH=${PREFIX}/lib/zeekctl \ + -D ZEEK_SCRIPT_INSTALL_PATH:PATH=${PREFIX}/share/zeek \ + -D ZEEK_ETC_INSTALL_DIR:PATH=${PREFIX}/etc \ + -D ZEEK_MAN_INSTALL_PATH=${MANPREFIX}/man \ -D ENABLE_PERFTOOLS:BOOL=false \ -D ENABLE_PERFTOOLS_DEBUG:BOOL=false \ -D BinPAC_SKIP_INSTALL:BOOL=true \ @@ -40,23 +39,22 @@ -D BUILD_STATIC_BROKER:BOOL=true \ -D CMAKE_EXE_LINKER_FLAGS="${OPENSSL_LDFLAGS}" -BROUSER?= bro -BROGROUP?= bro +ZEEKUSER?= zeek +ZEEKGROUP?= zeek PLIST_SUB+= ARCH=${ARCH} \ - BROUSER=${BROUSER} \ - BROGROUP=${BROGROUP} \ + ZEEKUSER=${ZEEKUSER} \ + ZEEKGROUP=${ZEEKGROUP} \ LCASE_OPSYS=${OPSYS:tl} -USERS= ${BROUSER} -GROUPS= ${BROGROUP} +USERS= ${ZEEKUSER} +GROUPS= ${ZEEKGROUP} -OPTIONS_DEFINE= BROCCOLI BROCTL BROKER DEBUG GEOIP2 IPSUMDUMP LBL_CF \ - LBL_HF NETMAP PERFTOOLS -OPTIONS_DEFAULT=BROCTL BROKER GEOIP2 IPSUMDUMP LBL_CF LBL_HF NETMAP +OPTIONS_DEFINE= BROCCOLI BROKER DEBUG GEOIP2 IPSUMDUMP LBL_CF LBL_HF \ + NETMAP PERFTOOLS ZEEKCTL +OPTIONS_DEFAULT=BROKER GEOIP2 IPSUMDUMP LBL_CF LBL_HF NETMAP ZEEKCTL OPTIONS_SUB= yes BROCCOLI_DESC= Build support for libbroccoli communications (DEPRECATED) -BROCTL_DESC= BroControl support (implies BROKER and IPSUMDUMP) BROKER_DESC= Enable the Broker communication library GEOIP2_DESC= Build with GeoIP2 (MaxMindDB) support IPSUMDUMP_DESC= Enables traffic summaries @@ -64,16 +62,11 @@ LBL_HF_DESC= Address to hostname filter support NETMAP_DESC= Native Netmap Packet IOSource for Bro PERFTOOLS_DESC= Use Perftools to improve memory & CPU usage +ZEEKCTL_DESC= ZeekControl support (implies BROKER and IPSUMDUMP) -BROCTL_IMPLIES= BROKER IPSUMDUMP +ZEEKCTL_IMPLIES= BROKER IPSUMDUMP BROCCOLI_LIB_DEPENDS= libbroccoli.so:security/broccoli -BROCTL_BUILD_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ - ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} \ - swig3.0:devel/swig30 -BROCTL_RUN_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ - ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} -BROCTL_CMAKE_BOOL= INSTALL_BROCTL GEOIP2_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb IPSUMDUMP_BUILD_DEPENDS=ipsumdump:net/ipsumdump IPSUMDUMP_RUN_DEPENDS= ipsumdump:net/ipsumdump @@ -82,40 +75,46 @@ DEBUG_CMAKE_BOOL= ENABLE_DEBUG LBL_HF_RUN_DEPENDS= ${LOCALBASE}/bin/hf:sysutils/lbl-hf LBL_CF_RUN_DEPENDS= ${LOCALBASE}/bin/cf:sysutils/lbl-cf -NETMAP_GH_TUPLE= bro:bro-netmap:cf88debf487b31ab30dc3b5bac64783b4e49997e:bro_netmap +NETMAP_GH_TUPLE= bro:bro-netmap:f3620df:bro_netmap NETMAP_USE= GITHUB=nodefault PERFTOOLS_CMAKE_BOOL= ENABLE_PERFTOOLS PERFTOOLS_RUN_DEPENDS= ${LOCALBASE}/bin/perftools-pprof:devel/google-perftools PYTHON_BUILD_DEPENDS= swig3.0:devel/swig30 +ZEEKCTL_BUILD_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ + ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} \ + swig3.0:devel/swig30 +ZEEKCTL_RUN_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ + ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} +ZEEKCTL_CMAKE_BOOL= INSTALL_ZEEKCTL .include -.if ${PORT_OPTIONS:MBROCTL} -USE_RC_SUBR= bro +.if ${PORT_OPTIONS:MZEEKCTL} +USE_RC_SUBR= zeek .endif -post-install-BROCTL-on: +post-install-ZEEKCTL-on: ${MKDIR} ${STAGEDIR}${PREFIX}/logs ${MKDIR} ${STAGEDIR}${PREFIX}/spool/tmp ${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/auto ${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/site -.for F in broctl.cfg networks.cfg node.cfg +.for F in zeekctl.cfg networks.cfg node.cfg ${MV} ${STAGEDIR}${PREFIX}/etc/${F} ${STAGEDIR}${PREFIX}/etc/${F}.example .endfor - ${RM} ${STAGEDIR}${PREFIX}/share/broctl/scripts/broctl-config.sh - ${LN} -s ../../../spool/broctl-config.sh \ - ${STAGEDIR}${PREFIX}/share/broctl/scripts/broctl-config.sh + ${RM} ${STAGEDIR}${PREFIX}/share/zeekctl/scripts/zeekctl-config.sh + ${LN} -s ../../../spool/zeekctl-config.sh \ + ${STAGEDIR}${PREFIX}/share/zeekctl/scripts/zeekctl-config.sh post-install: - ${RM} -r ${STAGEDIR}${PREFIX}/share/bro/cmake + ${RM} -r ${STAGEDIR}${PREFIX}/share/zeek/cmake -pre-install-BROCTL-on: +pre-install-ZEEKCTL-on: ${MKDIR} ${STAGEDIR}${PREFIX}/etc/rc.d post-build-NETMAP-on: ${LN} -s ../.build ${WRKSRC}/build (cd ${WRKSRC_bro_netmap} && ./configure --bro-dist=${WRKSRC} \ - --install-root=${STAGEDIR}${PREFIX}/lib/bro/plugins && \ + --install-root=${STAGEDIR}${PREFIX}/lib/zeek/plugins && \ make && make install) .include Index: security/zeek/distinfo =================================================================== --- security/zeek/distinfo +++ security/zeek/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1568760632 -SHA256 (bro-2.6.4.tar.gz) = a47a9cdcef0ea14d5f70c390ab266f0333063ff96f3869a5f1609581a1d1ceb7 -SIZE (bro-2.6.4.tar.gz) = 28481281 -SHA256 (bro-bro-netmap-cf88debf487b31ab30dc3b5bac64783b4e49997e_GH0.tar.gz) = 383423f92932c3ef244194954708b3a237b4f37ebc358014f51dcb3b9786896b -SIZE (bro-bro-netmap-cf88debf487b31ab30dc3b5bac64783b4e49997e_GH0.tar.gz) = 24630 +TIMESTAMP = 1573594504 +SHA256 (zeek-3.0.0.tar.gz) = b552940a14132bcbbd9afdf6476ec615b5a44a6d15f78b2cdc15860fa02bff9a +SIZE (zeek-3.0.0.tar.gz) = 29252635 +SHA256 (bro-bro-netmap-f3620df_GH0.tar.gz) = e51f420781c9a01b0494f93d82f94a1b045725c1cff406c33887974a9940c655 +SIZE (bro-bro-netmap-f3620df_GH0.tar.gz) = 24661 Index: security/zeek/files/zeek.in =================================================================== --- security/zeek/files/zeek.in +++ security/zeek/files/zeek.in @@ -1,80 +1,80 @@ #!/bin/sh # -# $FreeBSD: head/security/bro/files/bro.in 448446 2017-08-21 02:12:48Z swills $ +# $FreeBSD$ # -# PROVIDE: bro +# PROVIDE: zeek # REQUIRE: NETWORKING # REQUIRE: LOGIN FILESYSTEMS # KEYWORD: shutdown . /etc/rc.subr -name="bro" +name="zeek" rcvar=`set_rcvar` node=$2 -start_cmd="bro_start" -stop_cmd="bro_stop" -restart_cmd="bro_restart" -deploy_cmd="bro_deploy" -install_cmd="bro_install" -cleanup_cmd="bro_cleanup" -restart_cmd="bro_restart" -status_cmd="bro_status" +start_cmd="zeek_start" +stop_cmd="zeek_stop" +restart_cmd="zeek_restart" +deploy_cmd="zeek_deploy" +install_cmd="zeek_install" +cleanup_cmd="zeek_cleanup" +restart_cmd="zeek_restart" +status_cmd="zeek_status" extra_commands="deploy install cleanup status restart" -: ${broctl_program:=%%PREFIX%%/bin/broctl} +: ${zeekctl_program:=%%PREFIX%%/bin/zeekctl} -bro_enable=${bro_enable-"NO"} +zeek_enable=${zeek_enable-"NO"} -bro_start() { +zeek_start() { if [ ! "${node}" ]; then - $broctl_program start + $zeekctl_program start else - $broctl_program start $node + $zeekctl_program start $node fi } bro_stop() { if [ ! "${node}" ]; then - $broctl_program stop + $zeekctl_program stop else - $broctl_program stop $node + $zeekctl_program stop $node fi } -bro_restart() { +zeek_restart() { if [ ! "${node}" ]; then - $broctl_program restart + $zeekctl_program restart else - $broctl_program restart $node + $zeekctl_program restart $node fi } -bro_deploy() { - $broctl_program deploy +zeek_deploy() { + $zeekctl_program deploy } -bro_install() { - $broctl_program install +zeek_install() { + $zeekctl_program install } -bro_cleanup() { +zeek_cleanup() { if [ ! "${node}" ]; then - $broctl_program cleanup + $zeekctl_program cleanup else - $broctl_program cleanup ${node} + $zeekctl_program cleanup ${node} fi } -bro_status() { - $broctl_program status +zeek_status() { + $zeekctl_program status } load_rc_config $name Index: security/zeek/pkg-descr =================================================================== --- security/zeek/pkg-descr +++ security/zeek/pkg-descr @@ -1,13 +1,15 @@ -Bro is an open-source, Unix-based Network Intrusion Detection System (NIDS) -that passively monitors network traffic and looks for suspicious activity. -Bro detects intrusions by first parsing network traffic to extract its -application-level semantics and then executing event-oriented analyzers that -compare the activity with patterns deemed troublesome. Its analysis includes -detection of specific attacks (including those defined by signatures, but -also those defined in terms of events) and unusual activities (e.g., certain -hosts connecting to certain services, or patterns of failed connection -attempts). +Zeek (formally known as Bro) is an open-source, Unix-based Network +Intrusion Detection System (NIDS) that passively monitors network +traffic and looks for suspicious activity. Zeek detects intrusions +by first parsing network traffic to extract its application-level +semantics and then executing event-oriented analyzers that compare +the activity with patterns deemed troublesome. Its analysis includes +detection of specific attacks (including those defined by signatures, +but also those defined in terms of events) and unusual activities +(e.g., certain hosts connecting to certain services, or patterns +of failed connection attempts). -Bro is documented in the USENIX 1998 Security Conference proceedings. +Zeek is documented in the USENIX 1998 Security Conference proceedings +(as Bro). -WWW: https://www.bro.org/ +WWW: https://www.zeek.org/ Index: security/zeek/pkg-plist =================================================================== --- security/zeek/pkg-plist +++ security/zeek/pkg-plist @@ -1,576 +1,36 @@ -@postexec chown %%BROUSER%%:%%BROGROUP%% %D/logs -%%BROCTL%%@postexec chown %%BROUSER%%:%%BROGROUP%% %D/spool -%%BROCTL%%@postexec chown %%BROUSER%%:%%BROGROUP%% %D/spool/tmp -%%BROCTL%%@postexec chown -R %%BROUSER%%:%%BROGROUP%% %D/spool/installed-scripts-do-not-touch +@postexec chown %%ZEEKUSER%%:%%ZEEKGROUP%% %D/logs +%%ZEEKCTL%%@postexec chown %%ZEEKUSER%%:%%ZEEKGROUP%% %D/spool +%%ZEEKCTL%%@postexec chown %%ZEEKUSER%%:%%ZEEKGROUP%% %D/spool/tmp +%%ZEEKCTL%%@postexec chown -R %%ZEEKUSER%%:%%ZEEKGROUP%% %D/spool/installed-scripts-do-not-touch bin/bifcl bin/binpac bin/bro bin/bro-config bin/bro-cut -%%BROCTL%%bin/broctl -%%BROCTL%%bin/capstats -%%BROCTL%%bin/trace-summary -%%BROCTL%%@preunexec if cmp -s %D/etc/broctl.cfg.example %D/etc/broctl.cfg ; then rm -f %D/etc/broctl.cfg; fi -%%BROCTL%%etc/broctl.cfg.example -%%BROCTL%%@postexec if [ ! -f %D/etc/broctl.cfg ] ; then cp -p %D/etc/broctl.cfg.example %D/etc/broctl.cfg; fi -%%BROCTL%%@preunexec if cmp -s %D/etc/networks.cfg.example %D/etc/networks.cfg ; then rm -f %D/etc/networks.cfg; fi -%%BROCTL%%etc/networks.cfg.example -%%BROCTL%%@postexec if [ ! -f %D/etc/networks.cfg ] ; then cp -p %D/etc/networks.cfg.example %D/etc/networks.cfg; fi -%%BROCTL%%@preunexec if cmp -s %D/etc/node.cfg.example %D/etc/node.cfg ; then rm -f %D/etc/node.cfg; fi -%%BROCTL%%etc/node.cfg.example -%%BROCTL%%@postexec if [ ! -f %D/etc/node.cfg ] ; then cp -p %D/etc/node.cfg.example %D/etc/node.cfg; fi +bin/broctl +%%ZEEKCTL%%bin/capstats +bin/paraglob-test +%%ZEEKCTL%%bin/trace-summary +bin/zeek +bin/zeek-config +bin/zeek-cut +bin/zeek-wrapper +%%ZEEKCTL%%bin/zeekctl +%%ZEEKCTL%%@preunexec if cmp -s %D/etc/networks.cfg.example %D/etc/networks.cfg ; then rm -f %D/etc/networks.cfg; fi +%%ZEEKCTL%%etc/networks.cfg.example +%%ZEEKCTL%%@postexec if [ ! -f %D/etc/networks.cfg ] ; then cp -p %D/etc/networks.cfg.example %D/etc/networks.cfg; fi +%%ZEEKCTL%%@preunexec if cmp -s %D/etc/node.cfg.example %D/etc/node.cfg ; then rm -f %D/etc/node.cfg; fi +%%ZEEKCTL%%etc/node.cfg.example +%%ZEEKCTL%%@postexec if [ ! -f %D/etc/node.cfg ] ; then cp -p %D/etc/node.cfg.example %D/etc/node.cfg; fi +%%ZEEKCTL%%@preunexec if cmp -s %D/etc/zeekctl.cfg.example %D/etc/zeekctl.cfg ; then rm -f %D/etc/zeekctl.cfg; fi +%%ZEEKCTL%%etc/zeekctl.cfg.example +%%ZEEKCTL%%@postexec if [ ! -f %D/etc/zeekctl.cfg ] ; then cp -p %D/etc/zeekctl.cfg.example %D/etc/zeekctl.cfg; fi include/binpac/binpac.h include/binpac/binpac_analyzer.h include/binpac/binpac_buffer.h include/binpac/binpac_bytestring.h include/binpac/binpac_exception.h include/binpac/binpac_regex.h -include/bro/3rdparty/sqlite3.h -include/bro/Anon.h -include/bro/Attr.h -include/bro/Base64.h -include/bro/BroList.h -include/bro/BroString.h -include/bro/Brofiler.h -include/bro/CCL.h -include/bro/ChunkedIO.h -include/bro/CompHash.h -include/bro/Conn.h -include/bro/Continuation.h -include/bro/ConvertUTF.h -include/bro/DFA.h -include/bro/DNS_Mgr.h -include/bro/DbgBreakpoint.h -include/bro/DbgDisplay.h -include/bro/DbgWatch.h -include/bro/Debug.h -include/bro/DebugCmdInfoConstants.h -include/bro/DebugCmds.h -include/bro/DebugLogger.h -include/bro/Desc.h -include/bro/Dict.h -include/bro/Discard.h -include/bro/EquivClass.h -include/bro/Event.h -include/bro/EventHandler.h -include/bro/EventLauncher.h -include/bro/EventRegistry.h -include/bro/Expr.h -include/bro/File.h -include/bro/Flare.h -include/bro/Frag.h -include/bro/Frame.h -include/bro/Func.h -include/bro/Hash.h -include/bro/ID.h -include/bro/IP.h -include/bro/IPAddr.h -include/bro/IntSet.h -include/bro/List.h -include/bro/NFA.h -include/bro/Net.h -include/bro/NetVar.h -include/bro/OSFinger.h -include/bro/Obj.h -include/bro/Op.h -include/bro/OpaqueVal.h -include/bro/PacketDumper.h -include/bro/PacketFilter.h -include/bro/PersistenceSerializer.h -include/bro/Pipe.h -include/bro/PolicyFile.h -include/bro/PrefixTable.h -include/bro/PriorityQueue.h -include/bro/Queue.h -include/bro/RE.h -include/bro/RandTest.h -include/bro/Reassem.h -include/bro/RemoteSerializer.h -include/bro/Reporter.h -include/bro/Rule.h -include/bro/RuleAction.h -include/bro/RuleCondition.h -include/bro/RuleMatcher.h -include/bro/Scope.h -include/bro/SerialInfo.h -include/bro/SerialObj.h -include/bro/SerialTypes.h -include/bro/SerializationFormat.h -include/bro/Serializer.h -include/bro/Sessions.h -include/bro/SmithWaterman.h -include/bro/StateAccess.h -include/bro/Stats.h -include/bro/Stmt.h -include/bro/StmtEnums.h -include/bro/Tag.h -include/bro/Timer.h -include/bro/Traverse.h -include/bro/TraverseTypes.h -include/bro/Trigger.h -include/bro/TunnelEncapsulation.h -include/bro/Type.h -include/bro/UID.h -include/bro/Val.h -include/bro/Var.h -include/bro/analyzer/Analyzer.h -include/bro/analyzer/Component.h -include/bro/analyzer/Manager.h -include/bro/analyzer/Tag.h -include/bro/analyzer/analyzer.bif.h -include/bro/analyzer/protocol/arp/ARP.h -include/bro/analyzer/protocol/arp/events.bif.h -include/bro/analyzer/protocol/asn1/asn1.pac -include/bro/analyzer/protocol/ayiya/AYIYA.h -include/bro/analyzer/protocol/ayiya/ayiya-analyzer.pac -include/bro/analyzer/protocol/ayiya/ayiya-protocol.pac -include/bro/analyzer/protocol/ayiya/ayiya.pac -include/bro/analyzer/protocol/backdoor/BackDoor.h -include/bro/analyzer/protocol/backdoor/events.bif.h -include/bro/analyzer/protocol/bittorrent/BitTorrent.h -include/bro/analyzer/protocol/bittorrent/BitTorrentTracker.h -include/bro/analyzer/protocol/bittorrent/bittorrent-analyzer.pac -include/bro/analyzer/protocol/bittorrent/bittorrent-protocol.pac -include/bro/analyzer/protocol/bittorrent/bittorrent.pac -include/bro/analyzer/protocol/bittorrent/events.bif.h -include/bro/analyzer/protocol/conn-size/ConnSize.h -include/bro/analyzer/protocol/conn-size/events.bif.h -include/bro/analyzer/protocol/conn-size/functions.bif.h -include/bro/analyzer/protocol/dce-rpc/DCE_RPC.h -include/bro/analyzer/protocol/dce-rpc/consts.bif.h -include/bro/analyzer/protocol/dce-rpc/dce_rpc-analyzer.pac -include/bro/analyzer/protocol/dce-rpc/dce_rpc-auth.pac -include/bro/analyzer/protocol/dce-rpc/dce_rpc-protocol.pac -include/bro/analyzer/protocol/dce-rpc/dce_rpc.pac -include/bro/analyzer/protocol/dce-rpc/endpoint-atsvc.pac -include/bro/analyzer/protocol/dce-rpc/endpoint-epmapper.pac -include/bro/analyzer/protocol/dce-rpc/events.bif.h -include/bro/analyzer/protocol/dce-rpc/types.bif.h -include/bro/analyzer/protocol/dhcp/DHCP.h -include/bro/analyzer/protocol/dhcp/dhcp-analyzer.pac -include/bro/analyzer/protocol/dhcp/dhcp-options.pac -include/bro/analyzer/protocol/dhcp/dhcp-protocol.pac -include/bro/analyzer/protocol/dhcp/dhcp.pac -include/bro/analyzer/protocol/dhcp/events.bif.h -include/bro/analyzer/protocol/dhcp/types.bif.h -include/bro/analyzer/protocol/dnp3/DNP3.h -include/bro/analyzer/protocol/dnp3/dnp3-analyzer.pac -include/bro/analyzer/protocol/dnp3/dnp3-objects.pac -include/bro/analyzer/protocol/dnp3/dnp3-protocol.pac -include/bro/analyzer/protocol/dnp3/dnp3.pac -include/bro/analyzer/protocol/dnp3/events.bif.h -include/bro/analyzer/protocol/dns/DNS.h -include/bro/analyzer/protocol/dns/events.bif.h -include/bro/analyzer/protocol/file/File.h -include/bro/analyzer/protocol/file/events.bif.h -include/bro/analyzer/protocol/finger/Finger.h -include/bro/analyzer/protocol/finger/events.bif.h -include/bro/analyzer/protocol/ftp/FTP.h -include/bro/analyzer/protocol/ftp/events.bif.h -include/bro/analyzer/protocol/ftp/functions.bif.h -include/bro/analyzer/protocol/gnutella/Gnutella.h -include/bro/analyzer/protocol/gnutella/events.bif.h -include/bro/analyzer/protocol/gssapi/GSSAPI.h -include/bro/analyzer/protocol/gssapi/events.bif.h -include/bro/analyzer/protocol/gssapi/gssapi-analyzer.pac -include/bro/analyzer/protocol/gssapi/gssapi-protocol.pac -include/bro/analyzer/protocol/gssapi/gssapi.pac -include/bro/analyzer/protocol/gtpv1/GTPv1.h -include/bro/analyzer/protocol/gtpv1/events.bif.h -include/bro/analyzer/protocol/gtpv1/gtpv1-analyzer.pac -include/bro/analyzer/protocol/gtpv1/gtpv1-protocol.pac -include/bro/analyzer/protocol/gtpv1/gtpv1.pac -include/bro/analyzer/protocol/http/HTTP.h -include/bro/analyzer/protocol/http/events.bif.h -include/bro/analyzer/protocol/http/functions.bif.h -include/bro/analyzer/protocol/icmp/ICMP.h -include/bro/analyzer/protocol/icmp/events.bif.h -include/bro/analyzer/protocol/ident/Ident.h -include/bro/analyzer/protocol/ident/events.bif.h -include/bro/analyzer/protocol/imap/IMAP.h -include/bro/analyzer/protocol/imap/events.bif.h -include/bro/analyzer/protocol/imap/imap-analyzer.pac -include/bro/analyzer/protocol/imap/imap-protocol.pac -include/bro/analyzer/protocol/imap/imap.pac -include/bro/analyzer/protocol/interconn/InterConn.h -include/bro/analyzer/protocol/interconn/events.bif.h -include/bro/analyzer/protocol/irc/IRC.h -include/bro/analyzer/protocol/irc/events.bif.h -include/bro/analyzer/protocol/krb/KRB.h -include/bro/analyzer/protocol/krb/KRB_TCP.h -include/bro/analyzer/protocol/krb/events.bif.h -include/bro/analyzer/protocol/krb/krb-analyzer.pac -include/bro/analyzer/protocol/krb/krb-asn1.pac -include/bro/analyzer/protocol/krb/krb-defs.pac -include/bro/analyzer/protocol/krb/krb-padata.pac -include/bro/analyzer/protocol/krb/krb-protocol.pac -include/bro/analyzer/protocol/krb/krb-types.pac -include/bro/analyzer/protocol/krb/krb.pac -include/bro/analyzer/protocol/krb/krb_TCP.pac -include/bro/analyzer/protocol/krb/types.bif.h -include/bro/analyzer/protocol/login/Login.h -include/bro/analyzer/protocol/login/NVT.h -include/bro/analyzer/protocol/login/RSH.h -include/bro/analyzer/protocol/login/Rlogin.h -include/bro/analyzer/protocol/login/Telnet.h -include/bro/analyzer/protocol/login/events.bif.h -include/bro/analyzer/protocol/login/functions.bif.h -include/bro/analyzer/protocol/mime/MIME.h -include/bro/analyzer/protocol/mime/events.bif.h -include/bro/analyzer/protocol/modbus/Modbus.h -include/bro/analyzer/protocol/modbus/events.bif.h -include/bro/analyzer/protocol/modbus/modbus-analyzer.pac -include/bro/analyzer/protocol/modbus/modbus-protocol.pac -include/bro/analyzer/protocol/modbus/modbus.pac -include/bro/analyzer/protocol/mysql/MySQL.h -include/bro/analyzer/protocol/mysql/events.bif.h -include/bro/analyzer/protocol/mysql/mysql-analyzer.pac -include/bro/analyzer/protocol/mysql/mysql-protocol.pac -include/bro/analyzer/protocol/mysql/mysql.pac -include/bro/analyzer/protocol/ncp/NCP.h -include/bro/analyzer/protocol/ncp/consts.bif.h -include/bro/analyzer/protocol/ncp/events.bif.h -include/bro/analyzer/protocol/ncp/ncp.pac -include/bro/analyzer/protocol/netbios/NetbiosSSN.h -include/bro/analyzer/protocol/netbios/events.bif.h -include/bro/analyzer/protocol/netbios/functions.bif.h -include/bro/analyzer/protocol/ntlm/NTLM.h -include/bro/analyzer/protocol/ntlm/events.bif.h -include/bro/analyzer/protocol/ntlm/ntlm-analyzer.pac -include/bro/analyzer/protocol/ntlm/ntlm-protocol.pac -include/bro/analyzer/protocol/ntlm/ntlm.pac -include/bro/analyzer/protocol/ntlm/types.bif.h -include/bro/analyzer/protocol/ntp/NTP.h -include/bro/analyzer/protocol/ntp/events.bif.h -include/bro/analyzer/protocol/pia/PIA.h -include/bro/analyzer/protocol/pop3/POP3.h -include/bro/analyzer/protocol/pop3/events.bif.h -include/bro/analyzer/protocol/radius/RADIUS.h -include/bro/analyzer/protocol/radius/events.bif.h -include/bro/analyzer/protocol/radius/radius-analyzer.pac -include/bro/analyzer/protocol/radius/radius-protocol.pac -include/bro/analyzer/protocol/radius/radius.pac -include/bro/analyzer/protocol/rdp/RDP.h -include/bro/analyzer/protocol/rdp/events.bif.h -include/bro/analyzer/protocol/rdp/rdp-analyzer.pac -include/bro/analyzer/protocol/rdp/rdp-protocol.pac -include/bro/analyzer/protocol/rdp/rdp.pac -include/bro/analyzer/protocol/rdp/types.bif.h -include/bro/analyzer/protocol/rfb/RFB.h -include/bro/analyzer/protocol/rfb/events.bif.h -include/bro/analyzer/protocol/rfb/rfb-analyzer.pac -include/bro/analyzer/protocol/rfb/rfb-protocol.pac -include/bro/analyzer/protocol/rfb/rfb.pac -include/bro/analyzer/protocol/rpc/MOUNT.h -include/bro/analyzer/protocol/rpc/NFS.h -include/bro/analyzer/protocol/rpc/Portmap.h -include/bro/analyzer/protocol/rpc/RPC.h -include/bro/analyzer/protocol/rpc/XDR.h -include/bro/analyzer/protocol/rpc/events.bif.h -include/bro/analyzer/protocol/sip/SIP.h -include/bro/analyzer/protocol/sip/SIP_TCP.h -include/bro/analyzer/protocol/sip/events.bif.h -include/bro/analyzer/protocol/sip/sip-analyzer.pac -include/bro/analyzer/protocol/sip/sip-protocol.pac -include/bro/analyzer/protocol/sip/sip.pac -include/bro/analyzer/protocol/sip/sip_TCP.pac -include/bro/analyzer/protocol/smb/SMB.h -include/bro/analyzer/protocol/smb/consts.bif.h -include/bro/analyzer/protocol/smb/events.bif.h -include/bro/analyzer/protocol/smb/smb-common.pac -include/bro/analyzer/protocol/smb/smb-gssapi.pac -include/bro/analyzer/protocol/smb/smb-mailslot.pac -include/bro/analyzer/protocol/smb/smb-pipe.pac -include/bro/analyzer/protocol/smb/smb-strings.pac -include/bro/analyzer/protocol/smb/smb-time.pac -include/bro/analyzer/protocol/smb/smb.pac -include/bro/analyzer/protocol/smb/smb1-com-check-directory.pac -include/bro/analyzer/protocol/smb/smb1-com-close.pac -include/bro/analyzer/protocol/smb/smb1-com-create-directory.pac -include/bro/analyzer/protocol/smb/smb1-com-echo.pac -include/bro/analyzer/protocol/smb/smb1-com-locking-andx.pac -include/bro/analyzer/protocol/smb/smb1-com-logoff-andx.pac -include/bro/analyzer/protocol/smb/smb1-com-negotiate.pac -include/bro/analyzer/protocol/smb/smb1-com-nt-cancel.pac -include/bro/analyzer/protocol/smb/smb1-com-nt-create-andx.pac -include/bro/analyzer/protocol/smb/smb1-com-nt-transact.pac -include/bro/analyzer/protocol/smb/smb1-com-query-information.pac -include/bro/analyzer/protocol/smb/smb1-com-read-andx.pac -include/bro/analyzer/protocol/smb/smb1-com-session-setup-andx.pac -include/bro/analyzer/protocol/smb/smb1-com-transaction-secondary.pac -include/bro/analyzer/protocol/smb/smb1-com-transaction.pac -include/bro/analyzer/protocol/smb/smb1-com-transaction2-secondary.pac -include/bro/analyzer/protocol/smb/smb1-com-transaction2.pac -include/bro/analyzer/protocol/smb/smb1-com-tree-connect-andx.pac -include/bro/analyzer/protocol/smb/smb1-com-tree-disconnect.pac -include/bro/analyzer/protocol/smb/smb1-com-write-andx.pac -include/bro/analyzer/protocol/smb/smb1-protocol.pac -include/bro/analyzer/protocol/smb/smb1_com_check_directory.bif.h -include/bro/analyzer/protocol/smb/smb1_com_close.bif.h -include/bro/analyzer/protocol/smb/smb1_com_create_directory.bif.h -include/bro/analyzer/protocol/smb/smb1_com_echo.bif.h -include/bro/analyzer/protocol/smb/smb1_com_logoff_andx.bif.h -include/bro/analyzer/protocol/smb/smb1_com_negotiate.bif.h -include/bro/analyzer/protocol/smb/smb1_com_nt_cancel.bif.h -include/bro/analyzer/protocol/smb/smb1_com_nt_create_andx.bif.h -include/bro/analyzer/protocol/smb/smb1_com_query_information.bif.h -include/bro/analyzer/protocol/smb/smb1_com_read_andx.bif.h -include/bro/analyzer/protocol/smb/smb1_com_session_setup_andx.bif.h -include/bro/analyzer/protocol/smb/smb1_com_transaction.bif.h -include/bro/analyzer/protocol/smb/smb1_com_transaction2.bif.h -include/bro/analyzer/protocol/smb/smb1_com_transaction2_secondary.bif.h -include/bro/analyzer/protocol/smb/smb1_com_transaction_secondary.bif.h -include/bro/analyzer/protocol/smb/smb1_com_tree_connect_andx.bif.h -include/bro/analyzer/protocol/smb/smb1_com_tree_disconnect.bif.h -include/bro/analyzer/protocol/smb/smb1_com_write_andx.bif.h -include/bro/analyzer/protocol/smb/smb1_events.bif.h -include/bro/analyzer/protocol/smb/smb2-com-close.pac -include/bro/analyzer/protocol/smb/smb2-com-create.pac -include/bro/analyzer/protocol/smb/smb2-com-ioctl.pac -include/bro/analyzer/protocol/smb/smb2-com-lock.pac -include/bro/analyzer/protocol/smb/smb2-com-negotiate.pac -include/bro/analyzer/protocol/smb/smb2-com-read.pac -include/bro/analyzer/protocol/smb/smb2-com-session-setup.pac -include/bro/analyzer/protocol/smb/smb2-com-set-info.pac -include/bro/analyzer/protocol/smb/smb2-com-tree-connect.pac -include/bro/analyzer/protocol/smb/smb2-com-tree-disconnect.pac -include/bro/analyzer/protocol/smb/smb2-com-write.pac -include/bro/analyzer/protocol/smb/smb2-protocol.pac -include/bro/analyzer/protocol/smb/smb2_com_close.bif.h -include/bro/analyzer/protocol/smb/smb2_com_create.bif.h -include/bro/analyzer/protocol/smb/smb2_com_negotiate.bif.h -include/bro/analyzer/protocol/smb/smb2_com_read.bif.h -include/bro/analyzer/protocol/smb/smb2_com_session_setup.bif.h -include/bro/analyzer/protocol/smb/smb2_com_set_info.bif.h -include/bro/analyzer/protocol/smb/smb2_com_tree_connect.bif.h -include/bro/analyzer/protocol/smb/smb2_com_tree_disconnect.bif.h -include/bro/analyzer/protocol/smb/smb2_com_write.bif.h -include/bro/analyzer/protocol/smb/smb2_events.bif.h -include/bro/analyzer/protocol/smb/types.bif.h -include/bro/analyzer/protocol/smtp/SMTP.h -include/bro/analyzer/protocol/smtp/events.bif.h -include/bro/analyzer/protocol/smtp/functions.bif.h -include/bro/analyzer/protocol/snmp/SNMP.h -include/bro/analyzer/protocol/snmp/events.bif.h -include/bro/analyzer/protocol/snmp/snmp-analyzer.pac -include/bro/analyzer/protocol/snmp/snmp-protocol.pac -include/bro/analyzer/protocol/snmp/snmp.pac -include/bro/analyzer/protocol/snmp/types.bif.h -include/bro/analyzer/protocol/socks/SOCKS.h -include/bro/analyzer/protocol/socks/events.bif.h -include/bro/analyzer/protocol/socks/socks-analyzer.pac -include/bro/analyzer/protocol/socks/socks-protocol.pac -include/bro/analyzer/protocol/socks/socks.pac -include/bro/analyzer/protocol/ssh/SSH.h -include/bro/analyzer/protocol/ssh/consts.pac -include/bro/analyzer/protocol/ssh/events.bif.h -include/bro/analyzer/protocol/ssh/ssh-analyzer.pac -include/bro/analyzer/protocol/ssh/ssh-protocol.pac -include/bro/analyzer/protocol/ssh/ssh.pac -include/bro/analyzer/protocol/ssh/types.bif.h -include/bro/analyzer/protocol/ssl/DTLS.h -include/bro/analyzer/protocol/ssl/SSL.h -include/bro/analyzer/protocol/ssl/dtls-analyzer.pac -include/bro/analyzer/protocol/ssl/dtls-protocol.pac -include/bro/analyzer/protocol/ssl/dtls.pac -include/bro/analyzer/protocol/ssl/events.bif.h -include/bro/analyzer/protocol/ssl/functions.bif.h -include/bro/analyzer/protocol/ssl/proc-certificate.pac -include/bro/analyzer/protocol/ssl/proc-client-hello.pac -include/bro/analyzer/protocol/ssl/proc-server-hello.pac -include/bro/analyzer/protocol/ssl/ssl-analyzer.pac -include/bro/analyzer/protocol/ssl/ssl-defs.pac -include/bro/analyzer/protocol/ssl/ssl-dtls-analyzer.pac -include/bro/analyzer/protocol/ssl/ssl-dtls-protocol.pac -include/bro/analyzer/protocol/ssl/ssl-protocol.pac -include/bro/analyzer/protocol/ssl/ssl.pac -include/bro/analyzer/protocol/ssl/tls-handshake-analyzer.pac -include/bro/analyzer/protocol/ssl/tls-handshake-protocol.pac -include/bro/analyzer/protocol/ssl/tls-handshake-signed_certificate_timestamp.pac -include/bro/analyzer/protocol/ssl/tls-handshake.pac -include/bro/analyzer/protocol/ssl/types.bif.h -include/bro/analyzer/protocol/stepping-stone/SteppingStone.h -include/bro/analyzer/protocol/stepping-stone/events.bif.h -include/bro/analyzer/protocol/syslog/Syslog.h -include/bro/analyzer/protocol/syslog/events.bif.h -include/bro/analyzer/protocol/syslog/syslog-analyzer.pac -include/bro/analyzer/protocol/syslog/syslog-protocol.pac -include/bro/analyzer/protocol/syslog/syslog.pac -include/bro/analyzer/protocol/tcp/ContentLine.h -include/bro/analyzer/protocol/tcp/Stats.h -include/bro/analyzer/protocol/tcp/TCP.h -include/bro/analyzer/protocol/tcp/TCP_Endpoint.h -include/bro/analyzer/protocol/tcp/TCP_Flags.h -include/bro/analyzer/protocol/tcp/TCP_Reassembler.h -include/bro/analyzer/protocol/tcp/events.bif.h -include/bro/analyzer/protocol/tcp/functions.bif.h -include/bro/analyzer/protocol/teredo/Teredo.h -include/bro/analyzer/protocol/teredo/events.bif.h -include/bro/analyzer/protocol/udp/UDP.h -include/bro/analyzer/protocol/udp/events.bif.h -include/bro/analyzer/protocol/xmpp/XMPP.h -include/bro/analyzer/protocol/xmpp/events.bif.h -include/bro/analyzer/protocol/xmpp/xmpp-analyzer.pac -include/bro/analyzer/protocol/xmpp/xmpp-protocol.pac -include/bro/analyzer/protocol/xmpp/xmpp.pac -include/bro/analyzer/protocol/zip/ZIP.h -include/bro/binpac-lib.pac -include/bro/binpac.pac -include/bro/binpac_bro-lib.pac -include/bro/binpac_bro.h -include/bro/bro-bif.h -include/bro/bro-config.h -include/bro/bro.bif.func_h -include/bro/bro.bif.netvar_h -include/bro/bro.pac -include/bro/bro_inet_ntop.h -include/bro/broker/Data.h -include/bro/broker/Manager.h -include/bro/broker/Store.h -include/bro/broker/comm.bif.h -include/bro/broker/data.bif.h -include/bro/broker/messaging.bif.h -include/bro/broker/store.bif.h -include/bro/broxygen/Configuration.h -include/bro/broxygen/IdentifierInfo.h -include/bro/broxygen/Info.h -include/bro/broxygen/Manager.h -include/bro/broxygen/PackageInfo.h -include/bro/broxygen/ReStructuredTextTable.h -include/bro/broxygen/ScriptInfo.h -include/bro/broxygen/Target.h -include/bro/broxygen/broxygen.bif.h -include/bro/broxygen/utils.h -include/bro/bsd-getopt-long.h -include/bro/const.bif.func_h -include/bro/const.bif.netvar_h -include/bro/cq.h -include/bro/digest.h -include/bro/event.bif.func_h -include/bro/event.bif.netvar_h -include/bro/file_analysis/Analyzer.h -include/bro/file_analysis/AnalyzerSet.h -include/bro/file_analysis/Component.h -include/bro/file_analysis/File.h -include/bro/file_analysis/FileReassembler.h -include/bro/file_analysis/FileTimer.h -include/bro/file_analysis/Manager.h -include/bro/file_analysis/Tag.h -include/bro/file_analysis/analyzer/data_event/DataEvent.h -include/bro/file_analysis/analyzer/entropy/Entropy.h -include/bro/file_analysis/analyzer/entropy/events.bif.h -include/bro/file_analysis/analyzer/extract/Extract.h -include/bro/file_analysis/analyzer/extract/events.bif.h -include/bro/file_analysis/analyzer/extract/functions.bif.h -include/bro/file_analysis/analyzer/hash/Hash.h -include/bro/file_analysis/analyzer/hash/events.bif.h -include/bro/file_analysis/analyzer/pe/PE.h -include/bro/file_analysis/analyzer/pe/events.bif.h -include/bro/file_analysis/analyzer/pe/pe-analyzer.pac -include/bro/file_analysis/analyzer/pe/pe-file-headers.pac -include/bro/file_analysis/analyzer/pe/pe-file-idata.pac -include/bro/file_analysis/analyzer/pe/pe-file-types.pac -include/bro/file_analysis/analyzer/pe/pe-file.pac -include/bro/file_analysis/analyzer/pe/pe.pac -include/bro/file_analysis/analyzer/unified2/Unified2.h -include/bro/file_analysis/analyzer/unified2/events.bif.h -include/bro/file_analysis/analyzer/unified2/types.bif.h -include/bro/file_analysis/analyzer/unified2/unified2-analyzer.pac -include/bro/file_analysis/analyzer/unified2/unified2-file.pac -include/bro/file_analysis/analyzer/unified2/unified2.pac -include/bro/file_analysis/analyzer/x509/OCSP.h -include/bro/file_analysis/analyzer/x509/X509.h -include/bro/file_analysis/analyzer/x509/X509Common.h -include/bro/file_analysis/analyzer/x509/events.bif.h -include/bro/file_analysis/analyzer/x509/functions.bif.h -include/bro/file_analysis/analyzer/x509/ocsp_events.bif.h -include/bro/file_analysis/analyzer/x509/types.bif.h -include/bro/file_analysis/analyzer/x509/x509-extension.pac -include/bro/file_analysis/analyzer/x509/x509-signed_certificate_timestamp.pac -include/bro/file_analysis/file_analysis.bif.h -include/bro/input.h -include/bro/input/Component.h -include/bro/input/Manager.h -include/bro/input/ReaderBackend.h -include/bro/input/ReaderFrontend.h -include/bro/input/Tag.h -include/bro/input/input.bif.h -include/bro/input/readers/ascii/Ascii.h -include/bro/input/readers/ascii/ascii.bif.h -include/bro/input/readers/benchmark/Benchmark.h -include/bro/input/readers/benchmark/benchmark.bif.h -include/bro/input/readers/binary/Binary.h -include/bro/input/readers/binary/binary.bif.h -include/bro/input/readers/config/Config.h -include/bro/input/readers/config/config.bif.h -include/bro/input/readers/raw/Plugin.h -include/bro/input/readers/raw/Raw.h -include/bro/input/readers/raw/raw.bif.h -include/bro/input/readers/sqlite/SQLite.h -include/bro/input/readers/sqlite/sqlite.bif.h -include/bro/iosource/BPF_Program.h -include/bro/iosource/Component.h -include/bro/iosource/FD_Set.h -include/bro/iosource/IOSource.h -include/bro/iosource/Manager.h -include/bro/iosource/Packet.h -include/bro/iosource/PktDumper.h -include/bro/iosource/PktSrc.h -include/bro/iosource/pcap/Dumper.h -include/bro/iosource/pcap/Source.h -include/bro/iosource/pcap/pcap.bif.h -include/bro/logging/Component.h -include/bro/logging/Manager.h -include/bro/logging/Tag.h -include/bro/logging/WriterBackend.h -include/bro/logging/WriterFrontend.h -include/bro/logging/logging.bif.h -include/bro/logging/writers/ascii/Ascii.h -include/bro/logging/writers/ascii/ascii.bif.h -include/bro/logging/writers/none/None.h -include/bro/logging/writers/none/none.bif.h -include/bro/logging/writers/sqlite/SQLite.h -include/bro/logging/writers/sqlite/sqlite.bif.h -include/bro/modp_numtoa.h -include/bro/module_util.h -include/bro/nb_dns.h -include/bro/net_util.h -include/bro/option.bif.func_h -include/bro/option.bif.netvar_h -include/bro/patricia.h -include/bro/plugin/Component.h -include/bro/plugin/ComponentManager.h -include/bro/plugin/Manager.h -include/bro/plugin/Plugin.h -include/bro/plugin/TaggedComponent.h -include/bro/probabilistic/BitVector.h -include/bro/probabilistic/BloomFilter.h -include/bro/probabilistic/CardinalityCounter.h -include/bro/probabilistic/CounterVector.h -include/bro/probabilistic/Hasher.h -include/bro/probabilistic/Topk.h -include/bro/probabilistic/bloom-filter.bif.h -include/bro/probabilistic/cardinality-counter.bif.h -include/bro/probabilistic/top-k.bif.h -include/bro/reporter.bif.func_h -include/bro/reporter.bif.netvar_h -include/bro/setsignal.h -include/bro/siphash24.h -include/bro/stats.bif.func_h -include/bro/stats.bif.netvar_h -include/bro/strings.bif.func_h -include/bro/strings.bif.netvar_h -include/bro/threading/BasicThread.h -include/bro/threading/Formatter.h -include/bro/threading/Manager.h -include/bro/threading/MsgThread.h -include/bro/threading/Queue.h -include/bro/threading/SerialTypes.h -include/bro/threading/formatters/Ascii.h -include/bro/threading/formatters/JSON.h -include/bro/types.bif.func_h -include/bro/types.bif.netvar_h -include/bro/util.h %%BROKER%%include/broker/address.hh %%BROKER%%include/broker/api_flags.hh %%BROKER%%include/broker/atoms.hh @@ -624,6 +84,7 @@ %%BROKER%%include/broker/internal_command.hh %%BROKER%%include/broker/logger.hh %%BROKER%%include/broker/mailbox.hh +%%BROKER%%include/broker/message.hh %%BROKER%%include/broker/network_info.hh %%BROKER%%include/broker/none.hh %%BROKER%%include/broker/optional.hh @@ -644,6 +105,7 @@ %%BROKER%%include/broker/timeout.hh %%BROKER%%include/broker/topic.hh %%BROKER%%include/broker/version.hh +%%BROKER%%include/broker/zeek.hh %%BROKER%%include/caf/abstract_actor.hpp %%BROKER%%include/caf/abstract_channel.hpp %%BROKER%%include/caf/abstract_composable_behavior.hpp @@ -689,6 +151,7 @@ %%BROKER%%include/caf/config_option_adder.hpp %%BROKER%%include/caf/config_option_set.hpp %%BROKER%%include/caf/config_value.hpp +%%BROKER%%include/caf/cow_tuple.hpp %%BROKER%%include/caf/data_processor.hpp %%BROKER%%include/caf/decorator/sequencer.hpp %%BROKER%%include/caf/decorator/splitter.hpp @@ -738,6 +201,7 @@ %%BROKER%%include/caf/detail/is_one_of.hpp %%BROKER%%include/caf/detail/is_primitive_config_value.hpp %%BROKER%%include/caf/detail/limited_vector.hpp +%%BROKER%%include/caf/detail/log_level.hpp %%BROKER%%include/caf/detail/mask_bits.hpp %%BROKER%%include/caf/detail/merged_tuple.hpp %%BROKER%%include/caf/detail/message_data.hpp @@ -770,6 +234,7 @@ %%BROKER%%include/caf/detail/private_thread.hpp %%BROKER%%include/caf/detail/pseudo_tuple.hpp %%BROKER%%include/caf/detail/raw_access.hpp +%%BROKER%%include/caf/detail/ringbuffer.hpp %%BROKER%%include/caf/detail/ripemd_160.hpp %%BROKER%%include/caf/detail/safe_equal.hpp %%BROKER%%include/caf/detail/scope_guard.hpp @@ -780,6 +245,7 @@ %%BROKER%%include/caf/detail/simple_actor_clock.hpp %%BROKER%%include/caf/detail/socket_guard.hpp %%BROKER%%include/caf/detail/spawn_fwd.hpp +%%BROKER%%include/caf/detail/spawnable.hpp %%BROKER%%include/caf/detail/split_join.hpp %%BROKER%%include/caf/detail/squashed_int.hpp %%BROKER%%include/caf/detail/stream_distribution_tree.hpp @@ -921,6 +387,7 @@ %%BROKER%%include/caf/ipv4_subnet.hpp %%BROKER%%include/caf/ipv6_address.hpp %%BROKER%%include/caf/ipv6_subnet.hpp +%%BROKER%%include/caf/is_actor_handle.hpp %%BROKER%%include/caf/is_message_sink.hpp %%BROKER%%include/caf/is_timeout_or_catch_all.hpp %%BROKER%%include/caf/is_typed_actor.hpp @@ -983,7 +450,6 @@ %%BROKER%%include/caf/policy/categorized.hpp %%BROKER%%include/caf/policy/downstream_messages.hpp %%BROKER%%include/caf/policy/normal_messages.hpp -%%BROKER%%include/caf/policy/priority_aware.hpp %%BROKER%%include/caf/policy/profiled.hpp %%BROKER%%include/caf/policy/scheduler_policy.hpp %%BROKER%%include/caf/policy/tcp.hpp @@ -1075,261 +541,844 @@ %%BROKER%%include/caf/uri_builder.hpp %%BROKER%%include/caf/variant.hpp %%BROKER%%include/caf/weak_intrusive_ptr.hpp -%%NETMAP%%lib/bro/plugins/Bro_Netmap/COPYING -%%NETMAP%%lib/bro/plugins/Bro_Netmap/__bro_plugin__ -%%NETMAP%%lib/bro/plugins/Bro_Netmap/broctl/netmap.py -%%NETMAP%%lib/bro/plugins/Bro_Netmap/lib/Bro-Netmap.%%LCASE_OPSYS%%-%%ARCH%%.so -%%NETMAP%%lib/bro/plugins/Bro_Netmap/scripts/__load__.bro -%%NETMAP%%lib/bro/plugins/Bro_Netmap/scripts/init.bro -%%BROCTL%%lib/broctl/BroControl/__init__.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/__init__.pyc -%%BROCTL%%lib/broctl/BroControl/brocmd.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/brocmd.pyc -%%BROCTL%%lib/broctl/BroControl/broctl.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/broctl.pyc -%%BROCTL%%lib/broctl/BroControl/cmdresult.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/cmdresult.pyc -%%BROCTL%%lib/broctl/BroControl/config.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/config.pyc -%%BROCTL%%lib/broctl/BroControl/control.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/control.pyc -%%BROCTL%%lib/broctl/BroControl/cron.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/cron.pyc -%%BROCTL%%lib/broctl/BroControl/doc.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/doc.pyc -%%BROCTL%%lib/broctl/BroControl/events.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/events.pyc -%%BROCTL%%lib/broctl/BroControl/exceptions.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/exceptions.pyc -%%BROCTL%%lib/broctl/BroControl/execute.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/execute.pyc -%%BROCTL%%lib/broctl/BroControl/install.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/install.pyc -%%BROCTL%%lib/broctl/BroControl/lock.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/lock.pyc -%%BROCTL%%lib/broctl/BroControl/node.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/node.pyc -%%BROCTL%%lib/broctl/BroControl/options.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/options.pyc -%%BROCTL%%lib/broctl/BroControl/plugin.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/plugin.pyc -%%BROCTL%%lib/broctl/BroControl/pluginreg.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/pluginreg.pyc -%%BROCTL%%lib/broctl/BroControl/printdoc.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/printdoc.pyc -%%BROCTL%%lib/broctl/BroControl/py3bro.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/py3bro.pyc -%%BROCTL%%lib/broctl/BroControl/ssh_runner.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/ssh_runner.pyc -%%BROCTL%%lib/broctl/BroControl/state.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/state.pyc -%%BROCTL%%lib/broctl/BroControl/util.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/util.pyc -%%BROCTL%%lib/broctl/BroControl/utilcurses.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/utilcurses.pyc -%%BROCTL%%lib/broctl/BroControl/version.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/version.pyc -%%BROCTL%%lib/broctl/SubnetTree.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/SubnetTree.pyc -%%BROCTL%%lib/broctl/_SubnetTree.so -%%BROCTL%%lib/broctl/broker/__init__.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/broker/__init__.pyc -%%BROCTL%%lib/broctl/broker/_broker.so -%%BROCTL%%lib/broctl/broker/bro.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/broker/bro.pyc -%%BROCTL%%lib/broctl/plugins/TestPlugin.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/TestPlugin.pyc -%%BROCTL%%lib/broctl/plugins/lb_custom.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_custom.pyc -%%BROCTL%%lib/broctl/plugins/lb_myricom.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_myricom.pyc -%%BROCTL%%lib/broctl/plugins/lb_pf_ring.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_pf_ring.pyc -%%BROCTL%%lib/broctl/plugins/ps.py -%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/ps.pyc -lib/libbinpac.a +include/paraglob.h +include/zeek/3rdparty/fifo_map.hpp +include/zeek/3rdparty/json.hpp +include/zeek/3rdparty/sqlite3.h +include/zeek/Anon.h +include/zeek/Attr.h +include/zeek/Base64.h +include/zeek/BroList.h +include/zeek/BroString.h +include/zeek/Brofiler.h +include/zeek/CCL.h +include/zeek/CompHash.h +include/zeek/Conn.h +include/zeek/Continuation.h +include/zeek/ConvertUTF.h +include/zeek/DFA.h +include/zeek/DNS_Mgr.h +include/zeek/DbgBreakpoint.h +include/zeek/DbgDisplay.h +include/zeek/DbgWatch.h +include/zeek/Debug.h +include/zeek/DebugCmdInfoConstants.h +include/zeek/DebugCmds.h +include/zeek/DebugLogger.h +include/zeek/Desc.h +include/zeek/Dict.h +include/zeek/Discard.h +include/zeek/EquivClass.h +include/zeek/Event.h +include/zeek/EventHandler.h +include/zeek/EventLauncher.h +include/zeek/EventRegistry.h +include/zeek/Expr.h +include/zeek/File.h +include/zeek/Flare.h +include/zeek/Frag.h +include/zeek/Frame.h +include/zeek/Func.h +include/zeek/Hash.h +include/zeek/ID.h +include/zeek/IP.h +include/zeek/IPAddr.h +include/zeek/IntSet.h +include/zeek/List.h +include/zeek/NFA.h +include/zeek/Net.h +include/zeek/NetVar.h +include/zeek/Notifier.h +include/zeek/Obj.h +include/zeek/OpaqueVal.h +include/zeek/PacketDumper.h +include/zeek/PacketFilter.h +include/zeek/Pipe.h +include/zeek/PolicyFile.h +include/zeek/PrefixTable.h +include/zeek/PriorityQueue.h +include/zeek/Queue.h +include/zeek/RE.h +include/zeek/RandTest.h +include/zeek/Reassem.h +include/zeek/Reporter.h +include/zeek/Rule.h +include/zeek/RuleAction.h +include/zeek/RuleCondition.h +include/zeek/RuleMatcher.h +include/zeek/Scope.h +include/zeek/SerializationFormat.h +include/zeek/Sessions.h +include/zeek/SmithWaterman.h +include/zeek/Stats.h +include/zeek/Stmt.h +include/zeek/StmtEnums.h +include/zeek/Tag.h +include/zeek/Timer.h +include/zeek/Traverse.h +include/zeek/TraverseTypes.h +include/zeek/Trigger.h +include/zeek/TunnelEncapsulation.h +include/zeek/Type.h +include/zeek/UID.h +include/zeek/Val.h +include/zeek/Var.h +include/zeek/WeirdState.h +include/zeek/analyzer/Analyzer.h +include/zeek/analyzer/Component.h +include/zeek/analyzer/Manager.h +include/zeek/analyzer/Tag.h +include/zeek/analyzer/analyzer.bif.h +include/zeek/analyzer/protocol/arp/ARP.h +include/zeek/analyzer/protocol/arp/events.bif.h +include/zeek/analyzer/protocol/asn1/asn1.pac +include/zeek/analyzer/protocol/ayiya/AYIYA.h +include/zeek/analyzer/protocol/ayiya/ayiya-analyzer.pac +include/zeek/analyzer/protocol/ayiya/ayiya-protocol.pac +include/zeek/analyzer/protocol/ayiya/ayiya.pac +include/zeek/analyzer/protocol/bittorrent/BitTorrent.h +include/zeek/analyzer/protocol/bittorrent/BitTorrentTracker.h +include/zeek/analyzer/protocol/bittorrent/bittorrent-analyzer.pac +include/zeek/analyzer/protocol/bittorrent/bittorrent-protocol.pac +include/zeek/analyzer/protocol/bittorrent/bittorrent.pac +include/zeek/analyzer/protocol/bittorrent/events.bif.h +include/zeek/analyzer/protocol/conn-size/ConnSize.h +include/zeek/analyzer/protocol/conn-size/events.bif.h +include/zeek/analyzer/protocol/conn-size/functions.bif.h +include/zeek/analyzer/protocol/dce-rpc/DCE_RPC.h +include/zeek/analyzer/protocol/dce-rpc/consts.bif.h +include/zeek/analyzer/protocol/dce-rpc/dce_rpc-analyzer.pac +include/zeek/analyzer/protocol/dce-rpc/dce_rpc-auth.pac +include/zeek/analyzer/protocol/dce-rpc/dce_rpc-protocol.pac +include/zeek/analyzer/protocol/dce-rpc/dce_rpc.pac +include/zeek/analyzer/protocol/dce-rpc/endpoint-atsvc.pac +include/zeek/analyzer/protocol/dce-rpc/endpoint-epmapper.pac +include/zeek/analyzer/protocol/dce-rpc/events.bif.h +include/zeek/analyzer/protocol/dce-rpc/types.bif.h +include/zeek/analyzer/protocol/dhcp/DHCP.h +include/zeek/analyzer/protocol/dhcp/dhcp-analyzer.pac +include/zeek/analyzer/protocol/dhcp/dhcp-options.pac +include/zeek/analyzer/protocol/dhcp/dhcp-protocol.pac +include/zeek/analyzer/protocol/dhcp/dhcp.pac +include/zeek/analyzer/protocol/dhcp/events.bif.h +include/zeek/analyzer/protocol/dhcp/types.bif.h +include/zeek/analyzer/protocol/dnp3/DNP3.h +include/zeek/analyzer/protocol/dnp3/dnp3-analyzer.pac +include/zeek/analyzer/protocol/dnp3/dnp3-objects.pac +include/zeek/analyzer/protocol/dnp3/dnp3-protocol.pac +include/zeek/analyzer/protocol/dnp3/dnp3.pac +include/zeek/analyzer/protocol/dnp3/events.bif.h +include/zeek/analyzer/protocol/dns/DNS.h +include/zeek/analyzer/protocol/dns/events.bif.h +include/zeek/analyzer/protocol/file/File.h +include/zeek/analyzer/protocol/file/events.bif.h +include/zeek/analyzer/protocol/finger/Finger.h +include/zeek/analyzer/protocol/finger/events.bif.h +include/zeek/analyzer/protocol/ftp/FTP.h +include/zeek/analyzer/protocol/ftp/events.bif.h +include/zeek/analyzer/protocol/ftp/functions.bif.h +include/zeek/analyzer/protocol/gnutella/Gnutella.h +include/zeek/analyzer/protocol/gnutella/events.bif.h +include/zeek/analyzer/protocol/gssapi/GSSAPI.h +include/zeek/analyzer/protocol/gssapi/events.bif.h +include/zeek/analyzer/protocol/gssapi/gssapi-analyzer.pac +include/zeek/analyzer/protocol/gssapi/gssapi-protocol.pac +include/zeek/analyzer/protocol/gssapi/gssapi.pac +include/zeek/analyzer/protocol/gtpv1/GTPv1.h +include/zeek/analyzer/protocol/gtpv1/events.bif.h +include/zeek/analyzer/protocol/gtpv1/gtpv1-analyzer.pac +include/zeek/analyzer/protocol/gtpv1/gtpv1-protocol.pac +include/zeek/analyzer/protocol/gtpv1/gtpv1.pac +include/zeek/analyzer/protocol/http/HTTP.h +include/zeek/analyzer/protocol/http/events.bif.h +include/zeek/analyzer/protocol/http/functions.bif.h +include/zeek/analyzer/protocol/icmp/ICMP.h +include/zeek/analyzer/protocol/icmp/events.bif.h +include/zeek/analyzer/protocol/ident/Ident.h +include/zeek/analyzer/protocol/ident/events.bif.h +include/zeek/analyzer/protocol/imap/IMAP.h +include/zeek/analyzer/protocol/imap/events.bif.h +include/zeek/analyzer/protocol/imap/imap-analyzer.pac +include/zeek/analyzer/protocol/imap/imap-protocol.pac +include/zeek/analyzer/protocol/imap/imap.pac +include/zeek/analyzer/protocol/irc/IRC.h +include/zeek/analyzer/protocol/irc/events.bif.h +include/zeek/analyzer/protocol/krb/KRB.h +include/zeek/analyzer/protocol/krb/KRB_TCP.h +include/zeek/analyzer/protocol/krb/events.bif.h +include/zeek/analyzer/protocol/krb/krb-analyzer.pac +include/zeek/analyzer/protocol/krb/krb-asn1.pac +include/zeek/analyzer/protocol/krb/krb-defs.pac +include/zeek/analyzer/protocol/krb/krb-padata.pac +include/zeek/analyzer/protocol/krb/krb-protocol.pac +include/zeek/analyzer/protocol/krb/krb-types.pac +include/zeek/analyzer/protocol/krb/krb.pac +include/zeek/analyzer/protocol/krb/krb_TCP.pac +include/zeek/analyzer/protocol/krb/types.bif.h +include/zeek/analyzer/protocol/login/Login.h +include/zeek/analyzer/protocol/login/NVT.h +include/zeek/analyzer/protocol/login/RSH.h +include/zeek/analyzer/protocol/login/Rlogin.h +include/zeek/analyzer/protocol/login/Telnet.h +include/zeek/analyzer/protocol/login/events.bif.h +include/zeek/analyzer/protocol/login/functions.bif.h +include/zeek/analyzer/protocol/mime/MIME.h +include/zeek/analyzer/protocol/mime/events.bif.h +include/zeek/analyzer/protocol/modbus/Modbus.h +include/zeek/analyzer/protocol/modbus/events.bif.h +include/zeek/analyzer/protocol/modbus/modbus-analyzer.pac +include/zeek/analyzer/protocol/modbus/modbus-protocol.pac +include/zeek/analyzer/protocol/modbus/modbus.pac +include/zeek/analyzer/protocol/mqtt/MQTT.h +include/zeek/analyzer/protocol/mqtt/commands/connack.pac +include/zeek/analyzer/protocol/mqtt/commands/connect.pac +include/zeek/analyzer/protocol/mqtt/commands/disconnect.pac +include/zeek/analyzer/protocol/mqtt/commands/pingreq.pac +include/zeek/analyzer/protocol/mqtt/commands/pingresp.pac +include/zeek/analyzer/protocol/mqtt/commands/puback.pac +include/zeek/analyzer/protocol/mqtt/commands/pubcomp.pac +include/zeek/analyzer/protocol/mqtt/commands/publish.pac +include/zeek/analyzer/protocol/mqtt/commands/pubrec.pac +include/zeek/analyzer/protocol/mqtt/commands/pubrel.pac +include/zeek/analyzer/protocol/mqtt/commands/suback.pac +include/zeek/analyzer/protocol/mqtt/commands/subscribe.pac +include/zeek/analyzer/protocol/mqtt/commands/unsuback.pac +include/zeek/analyzer/protocol/mqtt/commands/unsubscribe.pac +include/zeek/analyzer/protocol/mqtt/events.bif.h +include/zeek/analyzer/protocol/mqtt/mqtt-protocol.pac +include/zeek/analyzer/protocol/mqtt/mqtt.pac +include/zeek/analyzer/protocol/mqtt/types.bif.h +include/zeek/analyzer/protocol/mysql/MySQL.h +include/zeek/analyzer/protocol/mysql/events.bif.h +include/zeek/analyzer/protocol/mysql/mysql-analyzer.pac +include/zeek/analyzer/protocol/mysql/mysql-protocol.pac +include/zeek/analyzer/protocol/mysql/mysql.pac +include/zeek/analyzer/protocol/ncp/NCP.h +include/zeek/analyzer/protocol/ncp/consts.bif.h +include/zeek/analyzer/protocol/ncp/events.bif.h +include/zeek/analyzer/protocol/ncp/ncp.pac +include/zeek/analyzer/protocol/netbios/NetbiosSSN.h +include/zeek/analyzer/protocol/netbios/events.bif.h +include/zeek/analyzer/protocol/netbios/functions.bif.h +include/zeek/analyzer/protocol/ntlm/NTLM.h +include/zeek/analyzer/protocol/ntlm/events.bif.h +include/zeek/analyzer/protocol/ntlm/ntlm-analyzer.pac +include/zeek/analyzer/protocol/ntlm/ntlm-protocol.pac +include/zeek/analyzer/protocol/ntlm/ntlm.pac +include/zeek/analyzer/protocol/ntlm/types.bif.h +include/zeek/analyzer/protocol/ntp/NTP.h +include/zeek/analyzer/protocol/ntp/events.bif.h +include/zeek/analyzer/protocol/ntp/ntp-analyzer.pac +include/zeek/analyzer/protocol/ntp/ntp-mode7.pac +include/zeek/analyzer/protocol/ntp/ntp-protocol.pac +include/zeek/analyzer/protocol/ntp/ntp.pac +include/zeek/analyzer/protocol/ntp/types.bif.h +include/zeek/analyzer/protocol/pia/PIA.h +include/zeek/analyzer/protocol/pop3/POP3.h +include/zeek/analyzer/protocol/pop3/events.bif.h +include/zeek/analyzer/protocol/radius/RADIUS.h +include/zeek/analyzer/protocol/radius/events.bif.h +include/zeek/analyzer/protocol/radius/radius-analyzer.pac +include/zeek/analyzer/protocol/radius/radius-protocol.pac +include/zeek/analyzer/protocol/radius/radius.pac +include/zeek/analyzer/protocol/rdp/RDP.h +include/zeek/analyzer/protocol/rdp/events.bif.h +include/zeek/analyzer/protocol/rdp/rdp-analyzer.pac +include/zeek/analyzer/protocol/rdp/rdp-protocol.pac +include/zeek/analyzer/protocol/rdp/rdp.pac +include/zeek/analyzer/protocol/rdp/types.bif.h +include/zeek/analyzer/protocol/rfb/RFB.h +include/zeek/analyzer/protocol/rfb/events.bif.h +include/zeek/analyzer/protocol/rfb/rfb-analyzer.pac +include/zeek/analyzer/protocol/rfb/rfb-protocol.pac +include/zeek/analyzer/protocol/rfb/rfb.pac +include/zeek/analyzer/protocol/rpc/MOUNT.h +include/zeek/analyzer/protocol/rpc/NFS.h +include/zeek/analyzer/protocol/rpc/Portmap.h +include/zeek/analyzer/protocol/rpc/RPC.h +include/zeek/analyzer/protocol/rpc/XDR.h +include/zeek/analyzer/protocol/rpc/events.bif.h +include/zeek/analyzer/protocol/sip/SIP.h +include/zeek/analyzer/protocol/sip/SIP_TCP.h +include/zeek/analyzer/protocol/sip/events.bif.h +include/zeek/analyzer/protocol/sip/sip-analyzer.pac +include/zeek/analyzer/protocol/sip/sip-protocol.pac +include/zeek/analyzer/protocol/sip/sip.pac +include/zeek/analyzer/protocol/sip/sip_TCP.pac +include/zeek/analyzer/protocol/smb/SMB.h +include/zeek/analyzer/protocol/smb/consts.bif.h +include/zeek/analyzer/protocol/smb/events.bif.h +include/zeek/analyzer/protocol/smb/smb-common.pac +include/zeek/analyzer/protocol/smb/smb-gssapi.pac +include/zeek/analyzer/protocol/smb/smb-mailslot.pac +include/zeek/analyzer/protocol/smb/smb-pipe.pac +include/zeek/analyzer/protocol/smb/smb-strings.pac +include/zeek/analyzer/protocol/smb/smb-time.pac +include/zeek/analyzer/protocol/smb/smb.pac +include/zeek/analyzer/protocol/smb/smb1-com-check-directory.pac +include/zeek/analyzer/protocol/smb/smb1-com-close.pac +include/zeek/analyzer/protocol/smb/smb1-com-create-directory.pac +include/zeek/analyzer/protocol/smb/smb1-com-echo.pac +include/zeek/analyzer/protocol/smb/smb1-com-locking-andx.pac +include/zeek/analyzer/protocol/smb/smb1-com-logoff-andx.pac +include/zeek/analyzer/protocol/smb/smb1-com-negotiate.pac +include/zeek/analyzer/protocol/smb/smb1-com-nt-cancel.pac +include/zeek/analyzer/protocol/smb/smb1-com-nt-create-andx.pac +include/zeek/analyzer/protocol/smb/smb1-com-nt-transact.pac +include/zeek/analyzer/protocol/smb/smb1-com-query-information.pac +include/zeek/analyzer/protocol/smb/smb1-com-read-andx.pac +include/zeek/analyzer/protocol/smb/smb1-com-session-setup-andx.pac +include/zeek/analyzer/protocol/smb/smb1-com-transaction-secondary.pac +include/zeek/analyzer/protocol/smb/smb1-com-transaction.pac +include/zeek/analyzer/protocol/smb/smb1-com-transaction2-secondary.pac +include/zeek/analyzer/protocol/smb/smb1-com-transaction2.pac +include/zeek/analyzer/protocol/smb/smb1-com-tree-connect-andx.pac +include/zeek/analyzer/protocol/smb/smb1-com-tree-disconnect.pac +include/zeek/analyzer/protocol/smb/smb1-com-write-andx.pac +include/zeek/analyzer/protocol/smb/smb1-protocol.pac +include/zeek/analyzer/protocol/smb/smb1_com_check_directory.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_close.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_create_directory.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_echo.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_logoff_andx.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_negotiate.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_nt_cancel.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_nt_create_andx.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_query_information.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_read_andx.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_session_setup_andx.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_transaction.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_transaction2.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_transaction2_secondary.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_transaction_secondary.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_tree_connect_andx.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_tree_disconnect.bif.h +include/zeek/analyzer/protocol/smb/smb1_com_write_andx.bif.h +include/zeek/analyzer/protocol/smb/smb1_events.bif.h +include/zeek/analyzer/protocol/smb/smb2-com-close.pac +include/zeek/analyzer/protocol/smb/smb2-com-create.pac +include/zeek/analyzer/protocol/smb/smb2-com-ioctl.pac +include/zeek/analyzer/protocol/smb/smb2-com-lock.pac +include/zeek/analyzer/protocol/smb/smb2-com-negotiate.pac +include/zeek/analyzer/protocol/smb/smb2-com-read.pac +include/zeek/analyzer/protocol/smb/smb2-com-session-setup.pac +include/zeek/analyzer/protocol/smb/smb2-com-set-info.pac +include/zeek/analyzer/protocol/smb/smb2-com-transform-header.pac +include/zeek/analyzer/protocol/smb/smb2-com-tree-connect.pac +include/zeek/analyzer/protocol/smb/smb2-com-tree-disconnect.pac +include/zeek/analyzer/protocol/smb/smb2-com-write.pac +include/zeek/analyzer/protocol/smb/smb2-protocol.pac +include/zeek/analyzer/protocol/smb/smb2_com_close.bif.h +include/zeek/analyzer/protocol/smb/smb2_com_create.bif.h +include/zeek/analyzer/protocol/smb/smb2_com_negotiate.bif.h +include/zeek/analyzer/protocol/smb/smb2_com_read.bif.h +include/zeek/analyzer/protocol/smb/smb2_com_session_setup.bif.h +include/zeek/analyzer/protocol/smb/smb2_com_set_info.bif.h +include/zeek/analyzer/protocol/smb/smb2_com_transform_header.bif.h +include/zeek/analyzer/protocol/smb/smb2_com_tree_connect.bif.h +include/zeek/analyzer/protocol/smb/smb2_com_tree_disconnect.bif.h +include/zeek/analyzer/protocol/smb/smb2_com_write.bif.h +include/zeek/analyzer/protocol/smb/smb2_events.bif.h +include/zeek/analyzer/protocol/smb/types.bif.h +include/zeek/analyzer/protocol/smtp/SMTP.h +include/zeek/analyzer/protocol/smtp/events.bif.h +include/zeek/analyzer/protocol/smtp/functions.bif.h +include/zeek/analyzer/protocol/snmp/SNMP.h +include/zeek/analyzer/protocol/snmp/events.bif.h +include/zeek/analyzer/protocol/snmp/snmp-analyzer.pac +include/zeek/analyzer/protocol/snmp/snmp-protocol.pac +include/zeek/analyzer/protocol/snmp/snmp.pac +include/zeek/analyzer/protocol/snmp/types.bif.h +include/zeek/analyzer/protocol/socks/SOCKS.h +include/zeek/analyzer/protocol/socks/events.bif.h +include/zeek/analyzer/protocol/socks/socks-analyzer.pac +include/zeek/analyzer/protocol/socks/socks-protocol.pac +include/zeek/analyzer/protocol/socks/socks.pac +include/zeek/analyzer/protocol/ssh/SSH.h +include/zeek/analyzer/protocol/ssh/consts.pac +include/zeek/analyzer/protocol/ssh/events.bif.h +include/zeek/analyzer/protocol/ssh/ssh-analyzer.pac +include/zeek/analyzer/protocol/ssh/ssh-protocol.pac +include/zeek/analyzer/protocol/ssh/ssh.pac +include/zeek/analyzer/protocol/ssh/types.bif.h +include/zeek/analyzer/protocol/ssl/DTLS.h +include/zeek/analyzer/protocol/ssl/SSL.h +include/zeek/analyzer/protocol/ssl/consts.bif.h +include/zeek/analyzer/protocol/ssl/dtls-analyzer.pac +include/zeek/analyzer/protocol/ssl/dtls-protocol.pac +include/zeek/analyzer/protocol/ssl/dtls.pac +include/zeek/analyzer/protocol/ssl/events.bif.h +include/zeek/analyzer/protocol/ssl/functions.bif.h +include/zeek/analyzer/protocol/ssl/proc-certificate.pac +include/zeek/analyzer/protocol/ssl/proc-client-hello.pac +include/zeek/analyzer/protocol/ssl/proc-server-hello.pac +include/zeek/analyzer/protocol/ssl/ssl-analyzer.pac +include/zeek/analyzer/protocol/ssl/ssl-defs.pac +include/zeek/analyzer/protocol/ssl/ssl-dtls-analyzer.pac +include/zeek/analyzer/protocol/ssl/ssl-dtls-protocol.pac +include/zeek/analyzer/protocol/ssl/ssl-protocol.pac +include/zeek/analyzer/protocol/ssl/ssl.pac +include/zeek/analyzer/protocol/ssl/tls-handshake-analyzer.pac +include/zeek/analyzer/protocol/ssl/tls-handshake-protocol.pac +include/zeek/analyzer/protocol/ssl/tls-handshake-signed_certificate_timestamp.pac +include/zeek/analyzer/protocol/ssl/tls-handshake.pac +include/zeek/analyzer/protocol/ssl/types.bif.h +include/zeek/analyzer/protocol/stepping-stone/SteppingStone.h +include/zeek/analyzer/protocol/stepping-stone/events.bif.h +include/zeek/analyzer/protocol/syslog/Syslog.h +include/zeek/analyzer/protocol/syslog/events.bif.h +include/zeek/analyzer/protocol/syslog/syslog-analyzer.pac +include/zeek/analyzer/protocol/syslog/syslog-protocol.pac +include/zeek/analyzer/protocol/syslog/syslog.pac +include/zeek/analyzer/protocol/tcp/ContentLine.h +include/zeek/analyzer/protocol/tcp/Stats.h +include/zeek/analyzer/protocol/tcp/TCP.h +include/zeek/analyzer/protocol/tcp/TCP_Endpoint.h +include/zeek/analyzer/protocol/tcp/TCP_Flags.h +include/zeek/analyzer/protocol/tcp/TCP_Reassembler.h +include/zeek/analyzer/protocol/tcp/events.bif.h +include/zeek/analyzer/protocol/tcp/functions.bif.h +include/zeek/analyzer/protocol/teredo/Teredo.h +include/zeek/analyzer/protocol/teredo/events.bif.h +include/zeek/analyzer/protocol/udp/UDP.h +include/zeek/analyzer/protocol/udp/events.bif.h +include/zeek/analyzer/protocol/vxlan/VXLAN.h +include/zeek/analyzer/protocol/vxlan/events.bif.h +include/zeek/analyzer/protocol/xmpp/XMPP.h +include/zeek/analyzer/protocol/xmpp/events.bif.h +include/zeek/analyzer/protocol/xmpp/xmpp-analyzer.pac +include/zeek/analyzer/protocol/xmpp/xmpp-protocol.pac +include/zeek/analyzer/protocol/xmpp/xmpp.pac +include/zeek/analyzer/protocol/zip/ZIP.h +include/zeek/binpac-lib.pac +include/zeek/binpac.pac +include/zeek/binpac_bro-lib.pac +include/zeek/binpac_bro.h +include/zeek/bro-bif.h +include/zeek/bro-config.h +include/zeek/bro.pac +include/zeek/bro_inet_ntop.h +include/zeek/broker/Data.h +include/zeek/broker/Manager.h +include/zeek/broker/Store.h +include/zeek/broker/comm.bif.h +include/zeek/broker/data.bif.h +include/zeek/broker/messaging.bif.h +include/zeek/broker/store.bif.h +include/zeek/bsd-getopt-long.h +include/zeek/const.bif.func_h +include/zeek/const.bif.netvar_h +include/zeek/cq.h +include/zeek/digest.h +include/zeek/event.bif.func_h +include/zeek/event.bif.netvar_h +include/zeek/file_analysis/Analyzer.h +include/zeek/file_analysis/AnalyzerSet.h +include/zeek/file_analysis/Component.h +include/zeek/file_analysis/File.h +include/zeek/file_analysis/FileReassembler.h +include/zeek/file_analysis/FileTimer.h +include/zeek/file_analysis/Manager.h +include/zeek/file_analysis/Tag.h +include/zeek/file_analysis/analyzer/data_event/DataEvent.h +include/zeek/file_analysis/analyzer/entropy/Entropy.h +include/zeek/file_analysis/analyzer/entropy/events.bif.h +include/zeek/file_analysis/analyzer/extract/Extract.h +include/zeek/file_analysis/analyzer/extract/events.bif.h +include/zeek/file_analysis/analyzer/extract/functions.bif.h +include/zeek/file_analysis/analyzer/hash/Hash.h +include/zeek/file_analysis/analyzer/hash/events.bif.h +include/zeek/file_analysis/analyzer/pe/PE.h +include/zeek/file_analysis/analyzer/pe/events.bif.h +include/zeek/file_analysis/analyzer/pe/pe-analyzer.pac +include/zeek/file_analysis/analyzer/pe/pe-file-headers.pac +include/zeek/file_analysis/analyzer/pe/pe-file-idata.pac +include/zeek/file_analysis/analyzer/pe/pe-file-types.pac +include/zeek/file_analysis/analyzer/pe/pe-file.pac +include/zeek/file_analysis/analyzer/pe/pe.pac +include/zeek/file_analysis/analyzer/unified2/Unified2.h +include/zeek/file_analysis/analyzer/unified2/events.bif.h +include/zeek/file_analysis/analyzer/unified2/types.bif.h +include/zeek/file_analysis/analyzer/unified2/unified2-analyzer.pac +include/zeek/file_analysis/analyzer/unified2/unified2-file.pac +include/zeek/file_analysis/analyzer/unified2/unified2.pac +include/zeek/file_analysis/analyzer/x509/OCSP.h +include/zeek/file_analysis/analyzer/x509/X509.h +include/zeek/file_analysis/analyzer/x509/X509Common.h +include/zeek/file_analysis/analyzer/x509/events.bif.h +include/zeek/file_analysis/analyzer/x509/functions.bif.h +include/zeek/file_analysis/analyzer/x509/ocsp_events.bif.h +include/zeek/file_analysis/analyzer/x509/types.bif.h +include/zeek/file_analysis/analyzer/x509/x509-extension.pac +include/zeek/file_analysis/analyzer/x509/x509-signed_certificate_timestamp.pac +include/zeek/file_analysis/file_analysis.bif.h +include/zeek/input.h +include/zeek/input/Component.h +include/zeek/input/Manager.h +include/zeek/input/ReaderBackend.h +include/zeek/input/ReaderFrontend.h +include/zeek/input/Tag.h +include/zeek/input/input.bif.h +include/zeek/input/readers/ascii/Ascii.h +include/zeek/input/readers/ascii/ascii.bif.h +include/zeek/input/readers/benchmark/Benchmark.h +include/zeek/input/readers/benchmark/benchmark.bif.h +include/zeek/input/readers/binary/Binary.h +include/zeek/input/readers/binary/binary.bif.h +include/zeek/input/readers/config/Config.h +include/zeek/input/readers/config/config.bif.h +include/zeek/input/readers/raw/Plugin.h +include/zeek/input/readers/raw/Raw.h +include/zeek/input/readers/raw/raw.bif.h +include/zeek/input/readers/sqlite/SQLite.h +include/zeek/input/readers/sqlite/sqlite.bif.h +include/zeek/iosource/BPF_Program.h +include/zeek/iosource/Component.h +include/zeek/iosource/FD_Set.h +include/zeek/iosource/IOSource.h +include/zeek/iosource/Manager.h +include/zeek/iosource/Packet.h +include/zeek/iosource/PktDumper.h +include/zeek/iosource/PktSrc.h +include/zeek/iosource/pcap/Dumper.h +include/zeek/iosource/pcap/Source.h +include/zeek/iosource/pcap/pcap.bif.h +include/zeek/logging/Component.h +include/zeek/logging/Manager.h +include/zeek/logging/Tag.h +include/zeek/logging/WriterBackend.h +include/zeek/logging/WriterFrontend.h +include/zeek/logging/logging.bif.h +include/zeek/logging/writers/ascii/Ascii.h +include/zeek/logging/writers/ascii/ascii.bif.h +include/zeek/logging/writers/none/None.h +include/zeek/logging/writers/none/none.bif.h +include/zeek/logging/writers/sqlite/SQLite.h +include/zeek/logging/writers/sqlite/sqlite.bif.h +include/zeek/modp_numtoa.h +include/zeek/module_util.h +include/zeek/nb_dns.h +include/zeek/net_util.h +include/zeek/option.bif.func_h +include/zeek/option.bif.netvar_h +include/zeek/patricia.h +include/zeek/plugin/Component.h +include/zeek/plugin/ComponentManager.h +include/zeek/plugin/Manager.h +include/zeek/plugin/Plugin.h +include/zeek/plugin/TaggedComponent.h +include/zeek/probabilistic/BitVector.h +include/zeek/probabilistic/BloomFilter.h +include/zeek/probabilistic/CardinalityCounter.h +include/zeek/probabilistic/CounterVector.h +include/zeek/probabilistic/Hasher.h +include/zeek/probabilistic/Topk.h +include/zeek/probabilistic/bloom-filter.bif.h +include/zeek/probabilistic/cardinality-counter.bif.h +include/zeek/probabilistic/top-k.bif.h +include/zeek/reporter.bif.func_h +include/zeek/reporter.bif.netvar_h +include/zeek/setsignal.h +include/zeek/siphash24.h +include/zeek/stats.bif.func_h +include/zeek/stats.bif.netvar_h +include/zeek/strings.bif.func_h +include/zeek/strings.bif.netvar_h +include/zeek/threading/BasicThread.h +include/zeek/threading/Formatter.h +include/zeek/threading/Manager.h +include/zeek/threading/MsgThread.h +include/zeek/threading/Queue.h +include/zeek/threading/SerialTypes.h +include/zeek/threading/formatters/Ascii.h +include/zeek/threading/formatters/JSON.h +include/zeek/types.bif.func_h +include/zeek/types.bif.netvar_h +include/zeek/util.h +include/zeek/zeek-config.h +include/zeek/zeek.bif.func_h +include/zeek/zeek.bif.netvar_h +include/zeek/zeekygen/Configuration.h +include/zeek/zeekygen/IdentifierInfo.h +include/zeek/zeekygen/Info.h +include/zeek/zeekygen/Manager.h +include/zeek/zeekygen/PackageInfo.h +include/zeek/zeekygen/ReStructuredTextTable.h +include/zeek/zeekygen/ScriptInfo.h +include/zeek/zeekygen/Target.h +include/zeek/zeekygen/utils.h +include/zeek/zeekygen/zeekygen.bif.h +%%ZEEKCTL%%lib/broctl +lib/libbinpac.so +lib/libbinpac.so.0 +lib/libbinpac.so.0.54 %%BROKER%%lib/libbroker.a %%BROKER%%lib/libcaf_core_static.a %%BROKER%%lib/libcaf_io_static.a %%BROKER%%lib/libcaf_openssl_static.a -man/man1/bro-cut.1.gz -%%BROCTL%%man/man1/trace-summary.1.gz -man/man8/bro.8.gz -%%BROCTL%%man/man8/broctl.8.gz -%%DATADIR%%/base/bif/__load__.bro -%%DATADIR%%/base/bif/analyzer.bif.bro -%%DATADIR%%/base/bif/bloom-filter.bif.bro -%%DATADIR%%/base/bif/bro.bif.bro -%%DATADIR%%/base/bif/broxygen.bif.bro -%%DATADIR%%/base/bif/cardinality-counter.bif.bro -%%DATADIR%%/base/bif/comm.bif.bro -%%DATADIR%%/base/bif/const.bif.bro -%%DATADIR%%/base/bif/data.bif.bro -%%DATADIR%%/base/bif/event.bif.bro -%%DATADIR%%/base/bif/file_analysis.bif.bro -%%DATADIR%%/base/bif/input.bif.bro -%%DATADIR%%/base/bif/logging.bif.bro -%%DATADIR%%/base/bif/messaging.bif.bro -%%DATADIR%%/base/bif/option.bif.bro -%%DATADIR%%/base/bif/pcap.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_ARP.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_AsciiReader.ascii.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_AsciiWriter.ascii.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_BackDoor.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_BenchmarkReader.benchmark.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_BinaryReader.binary.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_BitTorrent.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_ConfigReader.config.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_ConnSize.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_ConnSize.functions.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.consts.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.types.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_DHCP.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_DHCP.types.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_DNP3.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_DNS.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_FTP.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_FTP.functions.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_File.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_FileEntropy.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_FileExtract.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_FileExtract.functions.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_FileHash.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_Finger.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_GSSAPI.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_GTPv1.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_Gnutella.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_HTTP.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_HTTP.functions.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_ICMP.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_IMAP.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_IRC.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_Ident.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_InterConn.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_KRB.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_KRB.types.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_Login.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_Login.functions.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_MIME.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_Modbus.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_MySQL.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_NCP.consts.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_NCP.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_NTLM.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_NTLM.types.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_NTP.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_NetBIOS.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_NetBIOS.functions.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_NoneWriter.none.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_PE.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_POP3.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_RADIUS.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_RDP.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_RDP.types.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_RFB.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_RPC.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_RawReader.raw.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SIP.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.consts.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_check_directory.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_close.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_create_directory.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_echo.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_logoff_andx.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_negotiate.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_nt_cancel.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_nt_create_andx.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_query_information.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_read_andx.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_session_setup_andx.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_transaction.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_transaction2.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_transaction2_secondary.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_transaction_secondary.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_tree_connect_andx.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_tree_disconnect.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_write_andx.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_close.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_create.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_negotiate.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_read.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_session_setup.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_set_info.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_tree_connect.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_tree_disconnect.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_write.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMB.types.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMTP.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SMTP.functions.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SNMP.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SNMP.types.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SOCKS.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SQLiteReader.sqlite.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SQLiteWriter.sqlite.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SSH.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SSH.types.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SSL.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SSL.functions.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SSL.types.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_SteppingStone.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_Syslog.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_TCP.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_TCP.functions.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_Teredo.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_UDP.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_Unified2.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_Unified2.types.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_X509.events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_X509.functions.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_X509.ocsp_events.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_X509.types.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_XMPP.events.bif.bro -%%DATADIR%%/base/bif/plugins/__load__.bro -%%DATADIR%%/base/bif/reporter.bif.bro -%%DATADIR%%/base/bif/stats.bif.bro -%%DATADIR%%/base/bif/store.bif.bro -%%DATADIR%%/base/bif/strings.bif.bro -%%DATADIR%%/base/bif/top-k.bif.bro -%%DATADIR%%/base/bif/types.bif.bro -%%DATADIR%%/base/files/extract/__load__.bro -%%DATADIR%%/base/files/extract/main.bro -%%DATADIR%%/base/files/hash/__load__.bro -%%DATADIR%%/base/files/hash/main.bro -%%DATADIR%%/base/files/pe/__load__.bro -%%DATADIR%%/base/files/pe/consts.bro -%%DATADIR%%/base/files/pe/main.bro -%%DATADIR%%/base/files/unified2/__load__.bro -%%DATADIR%%/base/files/unified2/main.bro -%%DATADIR%%/base/files/x509/__load__.bro -%%DATADIR%%/base/files/x509/main.bro -%%DATADIR%%/base/frameworks/analyzer/__load__.bro -%%DATADIR%%/base/frameworks/analyzer/main.bro -%%DATADIR%%/base/frameworks/broker/__load__.bro -%%DATADIR%%/base/frameworks/broker/log.bro -%%DATADIR%%/base/frameworks/broker/main.bro -%%DATADIR%%/base/frameworks/broker/store.bro -%%DATADIR%%/base/frameworks/cluster/__load__.bro -%%DATADIR%%/base/frameworks/cluster/main.bro -%%DATADIR%%/base/frameworks/cluster/nodes/logger.bro -%%DATADIR%%/base/frameworks/cluster/nodes/manager.bro -%%DATADIR%%/base/frameworks/cluster/nodes/proxy.bro -%%DATADIR%%/base/frameworks/cluster/nodes/worker.bro -%%DATADIR%%/base/frameworks/cluster/pools.bro -%%DATADIR%%/base/frameworks/cluster/setup-connections.bro -%%DATADIR%%/base/frameworks/config/__load__.bro -%%DATADIR%%/base/frameworks/config/input.bro -%%DATADIR%%/base/frameworks/config/main.bro -%%DATADIR%%/base/frameworks/config/weird.bro -%%DATADIR%%/base/frameworks/control/__load__.bro -%%DATADIR%%/base/frameworks/control/main.bro -%%DATADIR%%/base/frameworks/dpd/__load__.bro -%%DATADIR%%/base/frameworks/dpd/main.bro -%%DATADIR%%/base/frameworks/files/__load__.bro -%%DATADIR%%/base/frameworks/files/magic/__load__.bro +lib/libparaglob.a +%%NETMAP%%lib/zeek/plugins/Bro_Netmap/COPYING +%%NETMAP%%lib/zeek/plugins/Bro_Netmap/__bro_plugin__ +%%NETMAP%%lib/zeek/plugins/Bro_Netmap/broctl/netmap.py +%%NETMAP%%lib/zeek/plugins/Bro_Netmap/lib/Bro-Netmap.%%LCASE_OPSYS%%-%%ARCH%%.so +%%NETMAP%%lib/zeek/plugins/Bro_Netmap/scripts/__load__.bro +%%NETMAP%%lib/zeek/plugins/Bro_Netmap/scripts/init.bro +%%ZEEKCTL%%lib/zeekctl/BroControl/__init__.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/BroControl/__init__.pyc +%%ZEEKCTL%%lib/zeekctl/BroControl/cmdresult.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/BroControl/cmdresult.pyc +%%ZEEKCTL%%lib/zeekctl/BroControl/config.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/BroControl/config.pyc +%%ZEEKCTL%%lib/zeekctl/BroControl/plugin.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/BroControl/plugin.pyc +%%ZEEKCTL%%lib/zeekctl/SubnetTree.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/SubnetTree.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/__init__.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/__init__.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/cmdresult.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/cmdresult.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/config.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/config.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/control.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/control.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/cron.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/cron.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/doc.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/doc.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/events.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/events.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/exceptions.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/exceptions.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/execute.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/execute.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/install.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/install.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/lock.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/lock.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/node.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/node.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/options.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/options.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/plugin.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/plugin.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/pluginreg.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/pluginreg.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/printdoc.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/printdoc.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/py3zeek.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/py3zeek.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/ssh_runner.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/ssh_runner.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/state.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/state.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/util.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/util.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/utilcurses.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/utilcurses.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/version.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/version.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/zeekcmd.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/zeekcmd.pyc +%%ZEEKCTL%%lib/zeekctl/ZeekControl/zeekctl.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/zeekctl.pyc +%%ZEEKCTL%%lib/zeekctl/_SubnetTree.so +%%ZEEKCTL%%lib/zeekctl/broker/__init__.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/broker/__init__.pyc +%%ZEEKCTL%%lib/zeekctl/broker/_broker.so +%%ZEEKCTL%%lib/zeekctl/broker/bro.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/broker/bro.pyc +%%ZEEKCTL%%lib/zeekctl/broker/zeek.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/broker/zeek.pyc +%%ZEEKCTL%%lib/zeekctl/plugins/TestPlugin.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/plugins/TestPlugin.pyc +%%ZEEKCTL%%lib/zeekctl/plugins/lb_custom.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/plugins/lb_custom.pyc +%%ZEEKCTL%%lib/zeekctl/plugins/lb_myricom.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/plugins/lb_myricom.pyc +%%ZEEKCTL%%lib/zeekctl/plugins/lb_pf_ring.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/plugins/lb_pf_ring.pyc +%%ZEEKCTL%%lib/zeekctl/plugins/ps.py +%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/plugins/ps.pyc +%%ZEEKCTL%%man/man1/trace-summary.1.gz +man/man1/zeek-cut.1.gz +man/man8/zeek.8.gz +%%ZEEKCTL%%man/man8/zeekctl.8.gz +%%DATADIR%%/base/bif/__load__.zeek +%%DATADIR%%/base/bif/analyzer.bif.zeek +%%DATADIR%%/base/bif/bloom-filter.bif.zeek +%%DATADIR%%/base/bif/cardinality-counter.bif.zeek +%%DATADIR%%/base/bif/comm.bif.zeek +%%DATADIR%%/base/bif/const.bif.zeek +%%DATADIR%%/base/bif/data.bif.zeek +%%DATADIR%%/base/bif/event.bif.zeek +%%DATADIR%%/base/bif/file_analysis.bif.zeek +%%DATADIR%%/base/bif/input.bif.zeek +%%DATADIR%%/base/bif/logging.bif.zeek +%%DATADIR%%/base/bif/messaging.bif.zeek +%%DATADIR%%/base/bif/option.bif.zeek +%%DATADIR%%/base/bif/pcap.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_ARP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_AsciiReader.ascii.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_AsciiWriter.ascii.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_BenchmarkReader.benchmark.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_BinaryReader.binary.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_BitTorrent.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_ConfigReader.config.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_ConnSize.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_ConnSize.functions.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_DCE_RPC.consts.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_DCE_RPC.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_DCE_RPC.types.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_DHCP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_DHCP.types.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_DNP3.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_DNS.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_FTP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_FTP.functions.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_File.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_FileEntropy.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_FileExtract.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_FileExtract.functions.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_FileHash.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_Finger.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_GSSAPI.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_GTPv1.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_Gnutella.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_HTTP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_HTTP.functions.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_ICMP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_IMAP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_IRC.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_Ident.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_KRB.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_KRB.types.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_Login.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_Login.functions.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_MIME.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_MQTT.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_MQTT.types.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_Modbus.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_MySQL.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_NCP.consts.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_NCP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_NTLM.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_NTLM.types.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_NTP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_NTP.types.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_NetBIOS.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_NetBIOS.functions.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_NoneWriter.none.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_PE.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_POP3.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_RADIUS.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_RDP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_RDP.types.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_RFB.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_RPC.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_RawReader.raw.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SIP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.consts.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_check_directory.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_close.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_create_directory.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_echo.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_logoff_andx.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_negotiate.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_nt_cancel.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_nt_create_andx.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_query_information.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_read_andx.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_session_setup_andx.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_transaction.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_transaction2.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_transaction2_secondary.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_transaction_secondary.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_tree_connect_andx.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_tree_disconnect.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_write_andx.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_close.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_create.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_negotiate.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_read.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_session_setup.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_set_info.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_transform_header.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_tree_connect.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_tree_disconnect.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_write.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMB.types.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMTP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SMTP.functions.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SNMP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SNMP.types.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SOCKS.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SQLiteReader.sqlite.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SQLiteWriter.sqlite.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SSH.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SSH.types.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SSL.consts.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SSL.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SSL.functions.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SSL.types.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_SteppingStone.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_Syslog.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_TCP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_TCP.functions.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_Teredo.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_UDP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_Unified2.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_Unified2.types.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_VXLAN.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_X509.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_X509.functions.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_X509.ocsp_events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_X509.types.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_XMPP.events.bif.zeek +%%DATADIR%%/base/bif/plugins/__load__.zeek +%%DATADIR%%/base/bif/reporter.bif.zeek +%%DATADIR%%/base/bif/stats.bif.zeek +%%DATADIR%%/base/bif/store.bif.zeek +%%DATADIR%%/base/bif/strings.bif.zeek +%%DATADIR%%/base/bif/top-k.bif.zeek +%%DATADIR%%/base/bif/types.bif.zeek +%%DATADIR%%/base/bif/zeek.bif.zeek +%%DATADIR%%/base/bif/zeekygen.bif.zeek +%%DATADIR%%/base/files/extract/__load__.zeek +%%DATADIR%%/base/files/extract/main.zeek +%%DATADIR%%/base/files/hash/__load__.zeek +%%DATADIR%%/base/files/hash/main.zeek +%%DATADIR%%/base/files/pe/__load__.zeek +%%DATADIR%%/base/files/pe/consts.zeek +%%DATADIR%%/base/files/pe/main.zeek +%%DATADIR%%/base/files/x509/__load__.zeek +%%DATADIR%%/base/files/x509/main.zeek +%%DATADIR%%/base/frameworks/analyzer/__load__.zeek +%%DATADIR%%/base/frameworks/analyzer/main.zeek +%%DATADIR%%/base/frameworks/broker/__load__.zeek +%%DATADIR%%/base/frameworks/broker/log.zeek +%%DATADIR%%/base/frameworks/broker/main.zeek +%%DATADIR%%/base/frameworks/broker/store.zeek +%%DATADIR%%/base/frameworks/cluster/__load__.zeek +%%DATADIR%%/base/frameworks/cluster/main.zeek +%%DATADIR%%/base/frameworks/cluster/nodes/logger.zeek +%%DATADIR%%/base/frameworks/cluster/nodes/manager.zeek +%%DATADIR%%/base/frameworks/cluster/nodes/proxy.zeek +%%DATADIR%%/base/frameworks/cluster/nodes/worker.zeek +%%DATADIR%%/base/frameworks/cluster/pools.zeek +%%DATADIR%%/base/frameworks/cluster/setup-connections.zeek +%%DATADIR%%/base/frameworks/config/__load__.zeek +%%DATADIR%%/base/frameworks/config/input.zeek +%%DATADIR%%/base/frameworks/config/main.zeek +%%DATADIR%%/base/frameworks/config/weird.zeek +%%DATADIR%%/base/frameworks/control/__load__.zeek +%%DATADIR%%/base/frameworks/control/main.zeek +%%DATADIR%%/base/frameworks/dpd/__load__.zeek +%%DATADIR%%/base/frameworks/dpd/main.zeek +%%DATADIR%%/base/frameworks/files/__load__.zeek +%%DATADIR%%/base/frameworks/files/magic/__load__.zeek %%DATADIR%%/base/frameworks/files/magic/archive.sig %%DATADIR%%/base/frameworks/files/magic/audio.sig %%DATADIR%%/base/frameworks/files/magic/font.sig @@ -1338,381 +1387,391 @@ %%DATADIR%%/base/frameworks/files/magic/libmagic.sig %%DATADIR%%/base/frameworks/files/magic/msoffice.sig %%DATADIR%%/base/frameworks/files/magic/video.sig -%%DATADIR%%/base/frameworks/files/main.bro -%%DATADIR%%/base/frameworks/input/__load__.bro -%%DATADIR%%/base/frameworks/input/main.bro -%%DATADIR%%/base/frameworks/input/readers/ascii.bro -%%DATADIR%%/base/frameworks/input/readers/benchmark.bro -%%DATADIR%%/base/frameworks/input/readers/binary.bro -%%DATADIR%%/base/frameworks/input/readers/config.bro -%%DATADIR%%/base/frameworks/input/readers/raw.bro -%%DATADIR%%/base/frameworks/input/readers/sqlite.bro -%%DATADIR%%/base/frameworks/intel/__load__.bro -%%DATADIR%%/base/frameworks/intel/cluster.bro -%%DATADIR%%/base/frameworks/intel/files.bro -%%DATADIR%%/base/frameworks/intel/input.bro -%%DATADIR%%/base/frameworks/intel/main.bro -%%DATADIR%%/base/frameworks/logging/__load__.bro -%%DATADIR%%/base/frameworks/logging/main.bro -%%DATADIR%%/base/frameworks/logging/postprocessors/__load__.bro -%%DATADIR%%/base/frameworks/logging/postprocessors/scp.bro -%%DATADIR%%/base/frameworks/logging/postprocessors/sftp.bro -%%DATADIR%%/base/frameworks/logging/writers/ascii.bro -%%DATADIR%%/base/frameworks/logging/writers/none.bro -%%DATADIR%%/base/frameworks/logging/writers/sqlite.bro -%%DATADIR%%/base/frameworks/netcontrol/__load__.bro -%%DATADIR%%/base/frameworks/netcontrol/catch-and-release.bro -%%DATADIR%%/base/frameworks/netcontrol/cluster.bro -%%DATADIR%%/base/frameworks/netcontrol/drop.bro -%%DATADIR%%/base/frameworks/netcontrol/main.bro -%%DATADIR%%/base/frameworks/netcontrol/non-cluster.bro -%%DATADIR%%/base/frameworks/netcontrol/plugin.bro -%%DATADIR%%/base/frameworks/netcontrol/plugins/__load__.bro -%%DATADIR%%/base/frameworks/netcontrol/plugins/acld.bro -%%DATADIR%%/base/frameworks/netcontrol/plugins/broker.bro -%%DATADIR%%/base/frameworks/netcontrol/plugins/debug.bro -%%DATADIR%%/base/frameworks/netcontrol/plugins/openflow.bro -%%DATADIR%%/base/frameworks/netcontrol/plugins/packetfilter.bro -%%DATADIR%%/base/frameworks/netcontrol/shunt.bro -%%DATADIR%%/base/frameworks/netcontrol/types.bro -%%DATADIR%%/base/frameworks/notice/__load__.bro -%%DATADIR%%/base/frameworks/notice/actions/add-geodata.bro -%%DATADIR%%/base/frameworks/notice/actions/drop.bro -%%DATADIR%%/base/frameworks/notice/actions/email_admin.bro -%%DATADIR%%/base/frameworks/notice/actions/page.bro -%%DATADIR%%/base/frameworks/notice/actions/pp-alarms.bro -%%DATADIR%%/base/frameworks/notice/main.bro -%%DATADIR%%/base/frameworks/notice/weird.bro -%%DATADIR%%/base/frameworks/openflow/__load__.bro -%%DATADIR%%/base/frameworks/openflow/cluster.bro -%%DATADIR%%/base/frameworks/openflow/consts.bro -%%DATADIR%%/base/frameworks/openflow/main.bro -%%DATADIR%%/base/frameworks/openflow/non-cluster.bro -%%DATADIR%%/base/frameworks/openflow/plugins/__load__.bro -%%DATADIR%%/base/frameworks/openflow/plugins/broker.bro -%%DATADIR%%/base/frameworks/openflow/plugins/log.bro -%%DATADIR%%/base/frameworks/openflow/plugins/ryu.bro -%%DATADIR%%/base/frameworks/openflow/types.bro -%%DATADIR%%/base/frameworks/packet-filter/__load__.bro -%%DATADIR%%/base/frameworks/packet-filter/cluster.bro -%%DATADIR%%/base/frameworks/packet-filter/main.bro -%%DATADIR%%/base/frameworks/packet-filter/netstats.bro -%%DATADIR%%/base/frameworks/packet-filter/utils.bro -%%DATADIR%%/base/frameworks/reporter/__load__.bro -%%DATADIR%%/base/frameworks/reporter/main.bro -%%DATADIR%%/base/frameworks/signatures/__load__.bro -%%DATADIR%%/base/frameworks/signatures/main.bro -%%DATADIR%%/base/frameworks/software/__load__.bro -%%DATADIR%%/base/frameworks/software/main.bro -%%DATADIR%%/base/frameworks/sumstats/__load__.bro -%%DATADIR%%/base/frameworks/sumstats/cluster.bro -%%DATADIR%%/base/frameworks/sumstats/main.bro -%%DATADIR%%/base/frameworks/sumstats/non-cluster.bro -%%DATADIR%%/base/frameworks/sumstats/plugins/__load__.bro -%%DATADIR%%/base/frameworks/sumstats/plugins/average.bro -%%DATADIR%%/base/frameworks/sumstats/plugins/hll_unique.bro -%%DATADIR%%/base/frameworks/sumstats/plugins/last.bro -%%DATADIR%%/base/frameworks/sumstats/plugins/max.bro -%%DATADIR%%/base/frameworks/sumstats/plugins/min.bro -%%DATADIR%%/base/frameworks/sumstats/plugins/sample.bro -%%DATADIR%%/base/frameworks/sumstats/plugins/std-dev.bro -%%DATADIR%%/base/frameworks/sumstats/plugins/sum.bro -%%DATADIR%%/base/frameworks/sumstats/plugins/topk.bro -%%DATADIR%%/base/frameworks/sumstats/plugins/unique.bro -%%DATADIR%%/base/frameworks/sumstats/plugins/variance.bro -%%DATADIR%%/base/frameworks/tunnels/__load__.bro -%%DATADIR%%/base/frameworks/tunnels/main.bro -%%DATADIR%%/base/init-bare.bro -%%DATADIR%%/base/init-default.bro -%%DATADIR%%/base/init-frameworks-and-bifs.bro -%%DATADIR%%/base/misc/find-checksum-offloading.bro -%%DATADIR%%/base/misc/find-filtered-trace.bro -%%DATADIR%%/base/misc/p0f.fp -%%DATADIR%%/base/misc/version.bro -%%DATADIR%%/base/protocols/conn/__load__.bro -%%DATADIR%%/base/protocols/conn/contents.bro -%%DATADIR%%/base/protocols/conn/inactivity.bro -%%DATADIR%%/base/protocols/conn/main.bro -%%DATADIR%%/base/protocols/conn/polling.bro -%%DATADIR%%/base/protocols/conn/thresholds.bro -%%DATADIR%%/base/protocols/dce-rpc/__load__.bro -%%DATADIR%%/base/protocols/dce-rpc/consts.bro +%%DATADIR%%/base/frameworks/files/main.zeek +%%DATADIR%%/base/frameworks/input/__load__.zeek +%%DATADIR%%/base/frameworks/input/main.zeek +%%DATADIR%%/base/frameworks/input/readers/ascii.zeek +%%DATADIR%%/base/frameworks/input/readers/benchmark.zeek +%%DATADIR%%/base/frameworks/input/readers/binary.zeek +%%DATADIR%%/base/frameworks/input/readers/config.zeek +%%DATADIR%%/base/frameworks/input/readers/raw.zeek +%%DATADIR%%/base/frameworks/input/readers/sqlite.zeek +%%DATADIR%%/base/frameworks/intel/__load__.zeek +%%DATADIR%%/base/frameworks/intel/cluster.zeek +%%DATADIR%%/base/frameworks/intel/files.zeek +%%DATADIR%%/base/frameworks/intel/input.zeek +%%DATADIR%%/base/frameworks/intel/main.zeek +%%DATADIR%%/base/frameworks/logging/__load__.zeek +%%DATADIR%%/base/frameworks/logging/main.zeek +%%DATADIR%%/base/frameworks/logging/postprocessors/__load__.zeek +%%DATADIR%%/base/frameworks/logging/postprocessors/scp.zeek +%%DATADIR%%/base/frameworks/logging/postprocessors/sftp.zeek +%%DATADIR%%/base/frameworks/logging/writers/ascii.zeek +%%DATADIR%%/base/frameworks/logging/writers/none.zeek +%%DATADIR%%/base/frameworks/logging/writers/sqlite.zeek +%%DATADIR%%/base/frameworks/netcontrol/__load__.zeek +%%DATADIR%%/base/frameworks/netcontrol/cluster.zeek +%%DATADIR%%/base/frameworks/netcontrol/drop.zeek +%%DATADIR%%/base/frameworks/netcontrol/main.zeek +%%DATADIR%%/base/frameworks/netcontrol/non-cluster.zeek +%%DATADIR%%/base/frameworks/netcontrol/plugin.zeek +%%DATADIR%%/base/frameworks/netcontrol/plugins/__load__.zeek +%%DATADIR%%/base/frameworks/netcontrol/plugins/acld.zeek +%%DATADIR%%/base/frameworks/netcontrol/plugins/broker.zeek +%%DATADIR%%/base/frameworks/netcontrol/plugins/debug.zeek +%%DATADIR%%/base/frameworks/netcontrol/plugins/openflow.zeek +%%DATADIR%%/base/frameworks/netcontrol/plugins/packetfilter.zeek +%%DATADIR%%/base/frameworks/netcontrol/shunt.zeek +%%DATADIR%%/base/frameworks/netcontrol/types.zeek +%%DATADIR%%/base/frameworks/notice/__load__.zeek +%%DATADIR%%/base/frameworks/notice/actions/add-geodata.zeek +%%DATADIR%%/base/frameworks/notice/actions/email_admin.zeek +%%DATADIR%%/base/frameworks/notice/actions/page.zeek +%%DATADIR%%/base/frameworks/notice/actions/pp-alarms.zeek +%%DATADIR%%/base/frameworks/notice/main.zeek +%%DATADIR%%/base/frameworks/notice/weird.zeek +%%DATADIR%%/base/frameworks/openflow/__load__.zeek +%%DATADIR%%/base/frameworks/openflow/cluster.zeek +%%DATADIR%%/base/frameworks/openflow/consts.zeek +%%DATADIR%%/base/frameworks/openflow/main.zeek +%%DATADIR%%/base/frameworks/openflow/non-cluster.zeek +%%DATADIR%%/base/frameworks/openflow/plugins/__load__.zeek +%%DATADIR%%/base/frameworks/openflow/plugins/broker.zeek +%%DATADIR%%/base/frameworks/openflow/plugins/log.zeek +%%DATADIR%%/base/frameworks/openflow/plugins/ryu.zeek +%%DATADIR%%/base/frameworks/openflow/types.zeek +%%DATADIR%%/base/frameworks/packet-filter/__load__.zeek +%%DATADIR%%/base/frameworks/packet-filter/cluster.zeek +%%DATADIR%%/base/frameworks/packet-filter/main.zeek +%%DATADIR%%/base/frameworks/packet-filter/netstats.zeek +%%DATADIR%%/base/frameworks/packet-filter/utils.zeek +%%DATADIR%%/base/frameworks/reporter/__load__.zeek +%%DATADIR%%/base/frameworks/reporter/main.zeek +%%DATADIR%%/base/frameworks/signatures/__load__.zeek +%%DATADIR%%/base/frameworks/signatures/main.zeek +%%DATADIR%%/base/frameworks/software/__load__.zeek +%%DATADIR%%/base/frameworks/software/main.zeek +%%DATADIR%%/base/frameworks/sumstats/__load__.zeek +%%DATADIR%%/base/frameworks/sumstats/cluster.zeek +%%DATADIR%%/base/frameworks/sumstats/main.zeek +%%DATADIR%%/base/frameworks/sumstats/non-cluster.zeek +%%DATADIR%%/base/frameworks/sumstats/plugins/__load__.zeek +%%DATADIR%%/base/frameworks/sumstats/plugins/average.zeek +%%DATADIR%%/base/frameworks/sumstats/plugins/hll_unique.zeek +%%DATADIR%%/base/frameworks/sumstats/plugins/last.zeek +%%DATADIR%%/base/frameworks/sumstats/plugins/max.zeek +%%DATADIR%%/base/frameworks/sumstats/plugins/min.zeek +%%DATADIR%%/base/frameworks/sumstats/plugins/sample.zeek +%%DATADIR%%/base/frameworks/sumstats/plugins/std-dev.zeek +%%DATADIR%%/base/frameworks/sumstats/plugins/sum.zeek +%%DATADIR%%/base/frameworks/sumstats/plugins/topk.zeek +%%DATADIR%%/base/frameworks/sumstats/plugins/unique.zeek +%%DATADIR%%/base/frameworks/sumstats/plugins/variance.zeek +%%DATADIR%%/base/frameworks/tunnels/__load__.zeek +%%DATADIR%%/base/frameworks/tunnels/main.zeek +%%DATADIR%%/base/init-bare.zeek +%%DATADIR%%/base/init-default.zeek +%%DATADIR%%/base/init-frameworks-and-bifs.zeek +%%DATADIR%%/base/misc/find-checksum-offloading.zeek +%%DATADIR%%/base/misc/find-filtered-trace.zeek +%%DATADIR%%/base/misc/version.zeek +%%DATADIR%%/base/protocols/conn/__load__.zeek +%%DATADIR%%/base/protocols/conn/contents.zeek +%%DATADIR%%/base/protocols/conn/inactivity.zeek +%%DATADIR%%/base/protocols/conn/main.zeek +%%DATADIR%%/base/protocols/conn/polling.zeek +%%DATADIR%%/base/protocols/conn/thresholds.zeek +%%DATADIR%%/base/protocols/dce-rpc/__load__.zeek +%%DATADIR%%/base/protocols/dce-rpc/consts.zeek %%DATADIR%%/base/protocols/dce-rpc/dpd.sig -%%DATADIR%%/base/protocols/dce-rpc/main.bro -%%DATADIR%%/base/protocols/dhcp/__load__.bro -%%DATADIR%%/base/protocols/dhcp/consts.bro +%%DATADIR%%/base/protocols/dce-rpc/main.zeek +%%DATADIR%%/base/protocols/dhcp/__load__.zeek +%%DATADIR%%/base/protocols/dhcp/consts.zeek %%DATADIR%%/base/protocols/dhcp/dpd.sig -%%DATADIR%%/base/protocols/dhcp/main.bro -%%DATADIR%%/base/protocols/dnp3/__load__.bro -%%DATADIR%%/base/protocols/dnp3/consts.bro +%%DATADIR%%/base/protocols/dhcp/main.zeek +%%DATADIR%%/base/protocols/dnp3/__load__.zeek +%%DATADIR%%/base/protocols/dnp3/consts.zeek %%DATADIR%%/base/protocols/dnp3/dpd.sig -%%DATADIR%%/base/protocols/dnp3/main.bro -%%DATADIR%%/base/protocols/dns/__load__.bro -%%DATADIR%%/base/protocols/dns/consts.bro -%%DATADIR%%/base/protocols/dns/main.bro -%%DATADIR%%/base/protocols/ftp/__load__.bro +%%DATADIR%%/base/protocols/dnp3/main.zeek +%%DATADIR%%/base/protocols/dns/__load__.zeek +%%DATADIR%%/base/protocols/dns/consts.zeek +%%DATADIR%%/base/protocols/dns/main.zeek +%%DATADIR%%/base/protocols/ftp/__load__.zeek %%DATADIR%%/base/protocols/ftp/dpd.sig -%%DATADIR%%/base/protocols/ftp/files.bro -%%DATADIR%%/base/protocols/ftp/gridftp.bro -%%DATADIR%%/base/protocols/ftp/info.bro -%%DATADIR%%/base/protocols/ftp/main.bro -%%DATADIR%%/base/protocols/ftp/utils-commands.bro -%%DATADIR%%/base/protocols/ftp/utils.bro -%%DATADIR%%/base/protocols/http/__load__.bro +%%DATADIR%%/base/protocols/ftp/files.zeek +%%DATADIR%%/base/protocols/ftp/gridftp.zeek +%%DATADIR%%/base/protocols/ftp/info.zeek +%%DATADIR%%/base/protocols/ftp/main.zeek +%%DATADIR%%/base/protocols/ftp/utils-commands.zeek +%%DATADIR%%/base/protocols/ftp/utils.zeek +%%DATADIR%%/base/protocols/http/__load__.zeek %%DATADIR%%/base/protocols/http/dpd.sig -%%DATADIR%%/base/protocols/http/entities.bro -%%DATADIR%%/base/protocols/http/files.bro -%%DATADIR%%/base/protocols/http/main.bro -%%DATADIR%%/base/protocols/http/utils.bro -%%DATADIR%%/base/protocols/imap/__load__.bro -%%DATADIR%%/base/protocols/imap/main.bro -%%DATADIR%%/base/protocols/irc/__load__.bro -%%DATADIR%%/base/protocols/irc/dcc-send.bro +%%DATADIR%%/base/protocols/http/entities.zeek +%%DATADIR%%/base/protocols/http/files.zeek +%%DATADIR%%/base/protocols/http/main.zeek +%%DATADIR%%/base/protocols/http/utils.zeek +%%DATADIR%%/base/protocols/imap/__load__.zeek +%%DATADIR%%/base/protocols/imap/main.zeek +%%DATADIR%%/base/protocols/irc/__load__.zeek +%%DATADIR%%/base/protocols/irc/dcc-send.zeek %%DATADIR%%/base/protocols/irc/dpd.sig -%%DATADIR%%/base/protocols/irc/files.bro -%%DATADIR%%/base/protocols/irc/main.bro -%%DATADIR%%/base/protocols/krb/__load__.bro -%%DATADIR%%/base/protocols/krb/consts.bro +%%DATADIR%%/base/protocols/irc/files.zeek +%%DATADIR%%/base/protocols/irc/main.zeek +%%DATADIR%%/base/protocols/krb/__load__.zeek +%%DATADIR%%/base/protocols/krb/consts.zeek %%DATADIR%%/base/protocols/krb/dpd.sig -%%DATADIR%%/base/protocols/krb/files.bro -%%DATADIR%%/base/protocols/krb/main.bro -%%DATADIR%%/base/protocols/modbus/__load__.bro -%%DATADIR%%/base/protocols/modbus/consts.bro -%%DATADIR%%/base/protocols/modbus/main.bro -%%DATADIR%%/base/protocols/mysql/__load__.bro -%%DATADIR%%/base/protocols/mysql/consts.bro -%%DATADIR%%/base/protocols/mysql/main.bro -%%DATADIR%%/base/protocols/ntlm/__load__.bro -%%DATADIR%%/base/protocols/ntlm/main.bro -%%DATADIR%%/base/protocols/pop3/__load__.bro +%%DATADIR%%/base/protocols/krb/files.zeek +%%DATADIR%%/base/protocols/krb/main.zeek +%%DATADIR%%/base/protocols/modbus/__load__.zeek +%%DATADIR%%/base/protocols/modbus/consts.zeek +%%DATADIR%%/base/protocols/modbus/main.zeek +%%DATADIR%%/base/protocols/mqtt/__load__.zeek +%%DATADIR%%/base/protocols/mqtt/consts.zeek +%%DATADIR%%/base/protocols/mysql/__load__.zeek +%%DATADIR%%/base/protocols/mysql/consts.zeek +%%DATADIR%%/base/protocols/mysql/main.zeek +%%DATADIR%%/base/protocols/ntlm/__load__.zeek +%%DATADIR%%/base/protocols/ntlm/main.zeek +%%DATADIR%%/base/protocols/ntp/__load__.zeek +%%DATADIR%%/base/protocols/ntp/consts.zeek +%%DATADIR%%/base/protocols/ntp/main.zeek +%%DATADIR%%/base/protocols/pop3/__load__.zeek %%DATADIR%%/base/protocols/pop3/dpd.sig -%%DATADIR%%/base/protocols/radius/__load__.bro -%%DATADIR%%/base/protocols/radius/consts.bro -%%DATADIR%%/base/protocols/radius/main.bro -%%DATADIR%%/base/protocols/rdp/__load__.bro -%%DATADIR%%/base/protocols/rdp/consts.bro +%%DATADIR%%/base/protocols/radius/__load__.zeek +%%DATADIR%%/base/protocols/radius/consts.zeek +%%DATADIR%%/base/protocols/radius/main.zeek +%%DATADIR%%/base/protocols/rdp/__load__.zeek +%%DATADIR%%/base/protocols/rdp/consts.zeek %%DATADIR%%/base/protocols/rdp/dpd.sig -%%DATADIR%%/base/protocols/rdp/main.bro -%%DATADIR%%/base/protocols/rfb/__load__.bro +%%DATADIR%%/base/protocols/rdp/main.zeek +%%DATADIR%%/base/protocols/rfb/__load__.zeek %%DATADIR%%/base/protocols/rfb/dpd.sig -%%DATADIR%%/base/protocols/rfb/main.bro -%%DATADIR%%/base/protocols/sip/__load__.bro +%%DATADIR%%/base/protocols/rfb/main.zeek +%%DATADIR%%/base/protocols/sip/__load__.zeek %%DATADIR%%/base/protocols/sip/dpd.sig -%%DATADIR%%/base/protocols/sip/main.bro -%%DATADIR%%/base/protocols/smb/__load__.bro -%%DATADIR%%/base/protocols/smb/const-dos-error.bro -%%DATADIR%%/base/protocols/smb/const-nt-status.bro -%%DATADIR%%/base/protocols/smb/consts.bro +%%DATADIR%%/base/protocols/sip/main.zeek +%%DATADIR%%/base/protocols/smb/__load__.zeek +%%DATADIR%%/base/protocols/smb/const-dos-error.zeek +%%DATADIR%%/base/protocols/smb/const-nt-status.zeek +%%DATADIR%%/base/protocols/smb/consts.zeek %%DATADIR%%/base/protocols/smb/dpd.sig -%%DATADIR%%/base/protocols/smb/files.bro -%%DATADIR%%/base/protocols/smb/main.bro -%%DATADIR%%/base/protocols/smb/smb1-main.bro -%%DATADIR%%/base/protocols/smb/smb2-main.bro -%%DATADIR%%/base/protocols/smtp/__load__.bro +%%DATADIR%%/base/protocols/smb/files.zeek +%%DATADIR%%/base/protocols/smb/main.zeek +%%DATADIR%%/base/protocols/smb/smb1-main.zeek +%%DATADIR%%/base/protocols/smb/smb2-main.zeek +%%DATADIR%%/base/protocols/smtp/__load__.zeek %%DATADIR%%/base/protocols/smtp/dpd.sig -%%DATADIR%%/base/protocols/smtp/entities.bro -%%DATADIR%%/base/protocols/smtp/files.bro -%%DATADIR%%/base/protocols/smtp/main.bro -%%DATADIR%%/base/protocols/snmp/__load__.bro -%%DATADIR%%/base/protocols/snmp/main.bro -%%DATADIR%%/base/protocols/socks/__load__.bro -%%DATADIR%%/base/protocols/socks/consts.bro +%%DATADIR%%/base/protocols/smtp/entities.zeek +%%DATADIR%%/base/protocols/smtp/files.zeek +%%DATADIR%%/base/protocols/smtp/main.zeek +%%DATADIR%%/base/protocols/snmp/__load__.zeek +%%DATADIR%%/base/protocols/snmp/main.zeek +%%DATADIR%%/base/protocols/socks/__load__.zeek +%%DATADIR%%/base/protocols/socks/consts.zeek %%DATADIR%%/base/protocols/socks/dpd.sig -%%DATADIR%%/base/protocols/socks/main.bro -%%DATADIR%%/base/protocols/ssh/__load__.bro +%%DATADIR%%/base/protocols/socks/main.zeek +%%DATADIR%%/base/protocols/ssh/__load__.zeek %%DATADIR%%/base/protocols/ssh/dpd.sig -%%DATADIR%%/base/protocols/ssh/main.bro -%%DATADIR%%/base/protocols/ssl/__load__.bro -%%DATADIR%%/base/protocols/ssl/consts.bro -%%DATADIR%%/base/protocols/ssl/ct-list.bro +%%DATADIR%%/base/protocols/ssh/main.zeek +%%DATADIR%%/base/protocols/ssl/__load__.zeek +%%DATADIR%%/base/protocols/ssl/consts.zeek +%%DATADIR%%/base/protocols/ssl/ct-list.zeek %%DATADIR%%/base/protocols/ssl/dpd.sig -%%DATADIR%%/base/protocols/ssl/files.bro -%%DATADIR%%/base/protocols/ssl/main.bro -%%DATADIR%%/base/protocols/ssl/mozilla-ca-list.bro -%%DATADIR%%/base/protocols/syslog/__load__.bro -%%DATADIR%%/base/protocols/syslog/consts.bro -%%DATADIR%%/base/protocols/syslog/main.bro -%%DATADIR%%/base/protocols/tunnels/__load__.bro +%%DATADIR%%/base/protocols/ssl/files.zeek +%%DATADIR%%/base/protocols/ssl/main.zeek +%%DATADIR%%/base/protocols/ssl/mozilla-ca-list.zeek +%%DATADIR%%/base/protocols/syslog/__load__.zeek +%%DATADIR%%/base/protocols/syslog/consts.zeek +%%DATADIR%%/base/protocols/syslog/main.zeek +%%DATADIR%%/base/protocols/tunnels/__load__.zeek %%DATADIR%%/base/protocols/tunnels/dpd.sig -%%DATADIR%%/base/protocols/xmpp/__load__.bro +%%DATADIR%%/base/protocols/xmpp/__load__.zeek %%DATADIR%%/base/protocols/xmpp/dpd.sig -%%DATADIR%%/base/protocols/xmpp/main.bro -%%DATADIR%%/base/utils/active-http.bro -%%DATADIR%%/base/utils/addrs.bro -%%DATADIR%%/base/utils/conn-ids.bro -%%DATADIR%%/base/utils/dir.bro -%%DATADIR%%/base/utils/directions-and-hosts.bro -%%DATADIR%%/base/utils/email.bro -%%DATADIR%%/base/utils/exec.bro -%%DATADIR%%/base/utils/files.bro -%%DATADIR%%/base/utils/geoip-distance.bro -%%DATADIR%%/base/utils/hash_hrw.bro -%%DATADIR%%/base/utils/json.bro -%%DATADIR%%/base/utils/numbers.bro -%%DATADIR%%/base/utils/paths.bro -%%DATADIR%%/base/utils/patterns.bro -%%DATADIR%%/base/utils/queue.bro -%%DATADIR%%/base/utils/site.bro -%%DATADIR%%/base/utils/strings.bro -%%DATADIR%%/base/utils/thresholds.bro -%%DATADIR%%/base/utils/time.bro -%%DATADIR%%/base/utils/urls.bro -%%BROCTL%%%%DATADIR%%/broctl/__load__.bro -%%BROCTL%%%%DATADIR%%/broctl/auto.bro -%%BROCTL%%%%DATADIR%%/broctl/check.bro -%%BROCTL%%%%DATADIR%%/broctl/main.bro -%%BROCTL%%%%DATADIR%%/broctl/process-trace.bro -%%BROCTL%%%%DATADIR%%/broctl/standalone.bro -%%DATADIR%%/broxygen/__load__.bro -%%DATADIR%%/broxygen/example.bro -%%DATADIR%%/policy/files/x509/log-ocsp.bro -%%DATADIR%%/policy/frameworks/control/controllee.bro -%%DATADIR%%/policy/frameworks/control/controller.bro -%%DATADIR%%/policy/frameworks/dpd/detect-protocols.bro -%%DATADIR%%/policy/frameworks/dpd/packet-segment-logging.bro -%%DATADIR%%/policy/frameworks/files/detect-MHR.bro -%%DATADIR%%/policy/frameworks/files/entropy-test-all-files.bro -%%DATADIR%%/policy/frameworks/files/extract-all-files.bro -%%DATADIR%%/policy/frameworks/files/hash-all-files.bro -%%DATADIR%%/policy/frameworks/intel/do_expire.bro -%%DATADIR%%/policy/frameworks/intel/do_notice.bro -%%DATADIR%%/policy/frameworks/intel/seen/__load__.bro -%%DATADIR%%/policy/frameworks/intel/seen/conn-established.bro -%%DATADIR%%/policy/frameworks/intel/seen/dns.bro -%%DATADIR%%/policy/frameworks/intel/seen/file-hashes.bro -%%DATADIR%%/policy/frameworks/intel/seen/file-names.bro -%%DATADIR%%/policy/frameworks/intel/seen/http-headers.bro -%%DATADIR%%/policy/frameworks/intel/seen/http-url.bro -%%DATADIR%%/policy/frameworks/intel/seen/pubkey-hashes.bro -%%DATADIR%%/policy/frameworks/intel/seen/smtp-url-extraction.bro -%%DATADIR%%/policy/frameworks/intel/seen/smtp.bro -%%DATADIR%%/policy/frameworks/intel/seen/ssl.bro -%%DATADIR%%/policy/frameworks/intel/seen/where-locations.bro -%%DATADIR%%/policy/frameworks/intel/seen/x509.bro -%%DATADIR%%/policy/frameworks/intel/whitelist.bro -%%DATADIR%%/policy/frameworks/notice/__load__.bro -%%DATADIR%%/policy/frameworks/notice/extend-email/hostnames.bro -%%DATADIR%%/policy/frameworks/packet-filter/shunt.bro +%%DATADIR%%/base/protocols/xmpp/main.zeek +%%DATADIR%%/base/utils/active-http.zeek +%%DATADIR%%/base/utils/addrs.zeek +%%DATADIR%%/base/utils/conn-ids.zeek +%%DATADIR%%/base/utils/dir.zeek +%%DATADIR%%/base/utils/directions-and-hosts.zeek +%%DATADIR%%/base/utils/email.zeek +%%DATADIR%%/base/utils/exec.zeek +%%DATADIR%%/base/utils/files.zeek +%%DATADIR%%/base/utils/geoip-distance.zeek +%%DATADIR%%/base/utils/hash_hrw.zeek +%%DATADIR%%/base/utils/json.zeek +%%DATADIR%%/base/utils/numbers.zeek +%%DATADIR%%/base/utils/paths.zeek +%%DATADIR%%/base/utils/patterns.zeek +%%DATADIR%%/base/utils/queue.zeek +%%DATADIR%%/base/utils/site.zeek +%%DATADIR%%/base/utils/strings.zeek +%%DATADIR%%/base/utils/thresholds.zeek +%%DATADIR%%/base/utils/time.zeek +%%DATADIR%%/base/utils/urls.zeek +%%DATADIR%%/policy/files/unified2/__load__.zeek +%%DATADIR%%/policy/files/unified2/main.zeek +%%DATADIR%%/policy/files/x509/log-ocsp.zeek +%%DATADIR%%/policy/frameworks/control/controllee.zeek +%%DATADIR%%/policy/frameworks/control/controller.zeek +%%DATADIR%%/policy/frameworks/dpd/detect-protocols.zeek +%%DATADIR%%/policy/frameworks/dpd/packet-segment-logging.zeek +%%DATADIR%%/policy/frameworks/files/detect-MHR.zeek +%%DATADIR%%/policy/frameworks/files/entropy-test-all-files.zeek +%%DATADIR%%/policy/frameworks/files/extract-all-files.zeek +%%DATADIR%%/policy/frameworks/files/hash-all-files.zeek +%%DATADIR%%/policy/frameworks/intel/do_expire.zeek +%%DATADIR%%/policy/frameworks/intel/do_notice.zeek +%%DATADIR%%/policy/frameworks/intel/removal.zeek +%%DATADIR%%/policy/frameworks/intel/seen/__load__.zeek +%%DATADIR%%/policy/frameworks/intel/seen/conn-established.zeek +%%DATADIR%%/policy/frameworks/intel/seen/dns.zeek +%%DATADIR%%/policy/frameworks/intel/seen/file-hashes.zeek +%%DATADIR%%/policy/frameworks/intel/seen/file-names.zeek +%%DATADIR%%/policy/frameworks/intel/seen/http-headers.zeek +%%DATADIR%%/policy/frameworks/intel/seen/http-url.zeek +%%DATADIR%%/policy/frameworks/intel/seen/pubkey-hashes.zeek +%%DATADIR%%/policy/frameworks/intel/seen/smb-filenames.zeek +%%DATADIR%%/policy/frameworks/intel/seen/smtp-url-extraction.zeek +%%DATADIR%%/policy/frameworks/intel/seen/smtp.zeek +%%DATADIR%%/policy/frameworks/intel/seen/ssl.zeek +%%DATADIR%%/policy/frameworks/intel/seen/where-locations.zeek +%%DATADIR%%/policy/frameworks/intel/seen/x509.zeek +%%DATADIR%%/policy/frameworks/intel/whitelist.zeek +%%DATADIR%%/policy/frameworks/netcontrol/catch-and-release.zeek +%%DATADIR%%/policy/frameworks/notice/__load__.zeek +%%DATADIR%%/policy/frameworks/notice/actions/drop.zeek +%%DATADIR%%/policy/frameworks/notice/extend-email/hostnames.zeek +%%DATADIR%%/policy/frameworks/packet-filter/shunt.zeek %%DATADIR%%/policy/frameworks/signatures/detect-windows-shells.sig -%%DATADIR%%/policy/frameworks/software/version-changes.bro -%%DATADIR%%/policy/frameworks/software/vulnerable.bro -%%DATADIR%%/policy/frameworks/software/windows-version-detection.bro -%%DATADIR%%/policy/integration/barnyard2/__load__.bro -%%DATADIR%%/policy/integration/barnyard2/main.bro -%%DATADIR%%/policy/integration/barnyard2/types.bro -%%DATADIR%%/policy/integration/collective-intel/__load__.bro -%%DATADIR%%/policy/integration/collective-intel/main.bro -%%DATADIR%%/policy/misc/capture-loss.bro -%%DATADIR%%/policy/misc/detect-traceroute/__load__.bro +%%DATADIR%%/policy/frameworks/software/version-changes.zeek +%%DATADIR%%/policy/frameworks/software/vulnerable.zeek +%%DATADIR%%/policy/frameworks/software/windows-version-detection.zeek +%%DATADIR%%/policy/integration/barnyard2/__load__.zeek +%%DATADIR%%/policy/integration/barnyard2/main.zeek +%%DATADIR%%/policy/integration/barnyard2/types.zeek +%%DATADIR%%/policy/integration/collective-intel/__load__.zeek +%%DATADIR%%/policy/integration/collective-intel/main.zeek +%%DATADIR%%/policy/misc/capture-loss.zeek +%%DATADIR%%/policy/misc/detect-traceroute/__load__.zeek %%DATADIR%%/policy/misc/detect-traceroute/detect-low-ttls.sig -%%DATADIR%%/policy/misc/detect-traceroute/main.bro -%%DATADIR%%/policy/misc/dump-events.bro -%%DATADIR%%/policy/misc/load-balancing.bro -%%DATADIR%%/policy/misc/loaded-scripts.bro -%%DATADIR%%/policy/misc/profiling.bro -%%DATADIR%%/policy/misc/scan.bro -%%DATADIR%%/policy/misc/stats.bro -%%DATADIR%%/policy/misc/trim-trace-file.bro -%%DATADIR%%/policy/misc/weird-stats.bro -%%DATADIR%%/policy/protocols/conn/known-hosts.bro -%%DATADIR%%/policy/protocols/conn/known-services.bro -%%DATADIR%%/policy/protocols/conn/mac-logging.bro -%%DATADIR%%/policy/protocols/conn/vlan-logging.bro -%%DATADIR%%/policy/protocols/conn/weirds.bro -%%DATADIR%%/policy/protocols/dhcp/deprecated_events.bro -%%DATADIR%%/policy/protocols/dhcp/msg-orig.bro -%%DATADIR%%/policy/protocols/dhcp/software.bro -%%DATADIR%%/policy/protocols/dhcp/sub-opts.bro -%%DATADIR%%/policy/protocols/dns/auth-addl.bro -%%DATADIR%%/policy/protocols/dns/detect-external-names.bro -%%DATADIR%%/policy/protocols/ftp/detect-bruteforcing.bro -%%DATADIR%%/policy/protocols/ftp/detect.bro -%%DATADIR%%/policy/protocols/ftp/software.bro -%%DATADIR%%/policy/protocols/http/detect-sqli.bro -%%DATADIR%%/policy/protocols/http/detect-webapps.bro +%%DATADIR%%/policy/misc/detect-traceroute/main.zeek +%%DATADIR%%/policy/misc/dump-events.zeek +%%DATADIR%%/policy/misc/load-balancing.zeek +%%DATADIR%%/policy/misc/loaded-scripts.zeek +%%DATADIR%%/policy/misc/profiling.zeek +%%DATADIR%%/policy/misc/scan.zeek +%%DATADIR%%/policy/misc/stats.zeek +%%DATADIR%%/policy/misc/trim-trace-file.zeek +%%DATADIR%%/policy/misc/weird-stats.zeek +%%DATADIR%%/policy/protocols/conn/known-hosts.zeek +%%DATADIR%%/policy/protocols/conn/known-services.zeek +%%DATADIR%%/policy/protocols/conn/mac-logging.zeek +%%DATADIR%%/policy/protocols/conn/vlan-logging.zeek +%%DATADIR%%/policy/protocols/conn/weirds.zeek +%%DATADIR%%/policy/protocols/dhcp/msg-orig.zeek +%%DATADIR%%/policy/protocols/dhcp/software.zeek +%%DATADIR%%/policy/protocols/dhcp/sub-opts.zeek +%%DATADIR%%/policy/protocols/dns/auth-addl.zeek +%%DATADIR%%/policy/protocols/dns/detect-external-names.zeek +%%DATADIR%%/policy/protocols/ftp/detect-bruteforcing.zeek +%%DATADIR%%/policy/protocols/ftp/detect.zeek +%%DATADIR%%/policy/protocols/ftp/software.zeek +%%DATADIR%%/policy/protocols/http/detect-sqli.zeek %%DATADIR%%/policy/protocols/http/detect-webapps.sig -%%DATADIR%%/policy/protocols/http/header-names.bro -%%DATADIR%%/policy/protocols/http/software-browser-plugins.bro -%%DATADIR%%/policy/protocols/http/software.bro -%%DATADIR%%/policy/protocols/http/var-extraction-cookies.bro -%%DATADIR%%/policy/protocols/http/var-extraction-uri.bro -%%DATADIR%%/policy/protocols/krb/ticket-logging.bro -%%DATADIR%%/policy/protocols/modbus/known-masters-slaves.bro -%%DATADIR%%/policy/protocols/modbus/track-memmap.bro -%%DATADIR%%/policy/protocols/mysql/software.bro -%%DATADIR%%/policy/protocols/rdp/indicate_ssl.bro -%%DATADIR%%/policy/protocols/smb/__load__.bro -%%DATADIR%%/policy/protocols/smb/log-cmds.bro -%%DATADIR%%/policy/protocols/smtp/blocklists.bro -%%DATADIR%%/policy/protocols/smtp/detect-suspicious-orig.bro -%%DATADIR%%/policy/protocols/smtp/entities-excerpt.bro -%%DATADIR%%/policy/protocols/smtp/software.bro -%%DATADIR%%/policy/protocols/ssh/detect-bruteforcing.bro -%%DATADIR%%/policy/protocols/ssh/geo-data.bro -%%DATADIR%%/policy/protocols/ssh/interesting-hostnames.bro -%%DATADIR%%/policy/protocols/ssh/software.bro -%%DATADIR%%/policy/protocols/ssl/expiring-certs.bro -%%DATADIR%%/policy/protocols/ssl/extract-certs-pem.bro -%%DATADIR%%/policy/protocols/ssl/heartbleed.bro -%%DATADIR%%/policy/protocols/ssl/known-certs.bro -%%DATADIR%%/policy/protocols/ssl/log-hostcerts-only.bro -%%DATADIR%%/policy/protocols/ssl/notary.bro -%%DATADIR%%/policy/protocols/ssl/validate-certs.bro -%%DATADIR%%/policy/protocols/ssl/validate-ocsp.bro -%%DATADIR%%/policy/protocols/ssl/validate-sct.bro -%%DATADIR%%/policy/protocols/ssl/weak-keys.bro -%%DATADIR%%/policy/tuning/__load__.bro -%%DATADIR%%/policy/tuning/defaults/__load__.bro -%%DATADIR%%/policy/tuning/defaults/extracted_file_limits.bro -%%DATADIR%%/policy/tuning/defaults/packet-fragments.bro -%%DATADIR%%/policy/tuning/defaults/warnings.bro -%%DATADIR%%/policy/tuning/json-logs.bro -%%DATADIR%%/policy/tuning/track-all-assets.bro -%%DATADIR%%/site/local.bro -%%BROCTL%%%%DATADIR%%ctl/scripts/archive-log -%%BROCTL%%%%DATADIR%%ctl/scripts/broctl-config.sh -%%BROCTL%%%%DATADIR%%ctl/scripts/check-config -%%BROCTL%%%%DATADIR%%ctl/scripts/crash-diag -%%BROCTL%%%%DATADIR%%ctl/scripts/delete-log -%%BROCTL%%%%DATADIR%%ctl/scripts/expire-crash -%%BROCTL%%%%DATADIR%%ctl/scripts/expire-logs -%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/check-pid -%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/df -%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/first-line -%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/start -%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/stop -%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/to-bytes.awk -%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/top -%%BROCTL%%%%DATADIR%%ctl/scripts/make-archive-name -%%BROCTL%%%%DATADIR%%ctl/scripts/post-terminate -%%BROCTL%%%%DATADIR%%ctl/scripts/postprocessors/summarize-connections -%%BROCTL%%%%DATADIR%%ctl/scripts/run-bro -%%BROCTL%%%%DATADIR%%ctl/scripts/run-bro-on-trace -%%BROCTL%%%%DATADIR%%ctl/scripts/send-mail -%%BROCTL%%%%DATADIR%%ctl/scripts/set-bro-path -%%BROCTL%%%%DATADIR%%ctl/scripts/stats-to-csv -%%BROCTL%%%%DATADIR%%ctl/scripts/update -%%BROCTL%%spool/broctl-config.sh -%%BROCTL%%@preunexec rm -f %D/logs/current -%%BROCTL%%@preunexec rm -f %D/spool/broctl.dat -%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/broctl-config.bro -%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/local-networks.bro -%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/standalone-layout.bro -%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-logger.bro -%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-manager.bro -%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-proxy.bro -%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-worker.bro -%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local.bro -%%BROCTL%%@preunexec rm -f %D/spool/state.db -%%BROCTL%%@dir spool/tmp -%%BROCTL%%@dir spool/installed-scripts-do-not-touch/site -%%BROCTL%%@dir spool/installed-scripts-do-not-touch/auto -%%BROCTL%%@dir spool/installed-scripts-do-not-touch -%%BROCTL%%@dir spool -%%BROCTL%%@dir %%DATADIR%%ctl/scripts/postprocessors -%%BROCTL%%@dir %%DATADIR%%ctl/scripts/helpers -%%BROCTL%%@dir %%DATADIR%%ctl/scripts -%%BROCTL%%@dir %%DATADIR%%ctl +%%DATADIR%%/policy/protocols/http/detect-webapps.zeek +%%DATADIR%%/policy/protocols/http/header-names.zeek +%%DATADIR%%/policy/protocols/http/software-browser-plugins.zeek +%%DATADIR%%/policy/protocols/http/software.zeek +%%DATADIR%%/policy/protocols/http/var-extraction-cookies.zeek +%%DATADIR%%/policy/protocols/http/var-extraction-uri.zeek +%%DATADIR%%/policy/protocols/krb/ticket-logging.zeek +%%DATADIR%%/policy/protocols/modbus/known-masters-slaves.zeek +%%DATADIR%%/policy/protocols/modbus/track-memmap.zeek +%%DATADIR%%/policy/protocols/mqtt/__load__.zeek +%%DATADIR%%/policy/protocols/mqtt/dpd.sig +%%DATADIR%%/policy/protocols/mqtt/main.zeek +%%DATADIR%%/policy/protocols/mysql/software.zeek +%%DATADIR%%/policy/protocols/rdp/indicate_ssl.zeek +%%DATADIR%%/policy/protocols/smb/log-cmds.zeek +%%DATADIR%%/policy/protocols/smtp/blocklists.zeek +%%DATADIR%%/policy/protocols/smtp/detect-suspicious-orig.zeek +%%DATADIR%%/policy/protocols/smtp/entities-excerpt.zeek +%%DATADIR%%/policy/protocols/smtp/software.zeek +%%DATADIR%%/policy/protocols/ssh/detect-bruteforcing.zeek +%%DATADIR%%/policy/protocols/ssh/geo-data.zeek +%%DATADIR%%/policy/protocols/ssh/interesting-hostnames.zeek +%%DATADIR%%/policy/protocols/ssh/software.zeek +%%DATADIR%%/policy/protocols/ssl/expiring-certs.zeek +%%DATADIR%%/policy/protocols/ssl/extract-certs-pem.zeek +%%DATADIR%%/policy/protocols/ssl/heartbleed.zeek +%%DATADIR%%/policy/protocols/ssl/known-certs.zeek +%%DATADIR%%/policy/protocols/ssl/log-hostcerts-only.zeek +%%DATADIR%%/policy/protocols/ssl/notary.zeek +%%DATADIR%%/policy/protocols/ssl/validate-certs.zeek +%%DATADIR%%/policy/protocols/ssl/validate-ocsp.zeek +%%DATADIR%%/policy/protocols/ssl/validate-sct.zeek +%%DATADIR%%/policy/protocols/ssl/weak-keys.zeek +%%DATADIR%%/policy/tuning/__load__.zeek +%%DATADIR%%/policy/tuning/defaults/__load__.zeek +%%DATADIR%%/policy/tuning/defaults/extracted_file_limits.zeek +%%DATADIR%%/policy/tuning/defaults/packet-fragments.zeek +%%DATADIR%%/policy/tuning/defaults/warnings.zeek +%%DATADIR%%/policy/tuning/json-logs.zeek +%%DATADIR%%/policy/tuning/track-all-assets.zeek +%%DATADIR%%/site/local.zeek +%%ZEEKCTL%%%%DATADIR%%/zeekctl/__load__.zeek +%%ZEEKCTL%%%%DATADIR%%/zeekctl/auto.zeek +%%ZEEKCTL%%%%DATADIR%%/zeekctl/check.zeek +%%ZEEKCTL%%%%DATADIR%%/zeekctl/main.zeek +%%ZEEKCTL%%%%DATADIR%%/zeekctl/process-trace.zeek +%%ZEEKCTL%%%%DATADIR%%/zeekctl/standalone.zeek +%%DATADIR%%/zeekygen/__load__.zeek +%%DATADIR%%/zeekygen/example.zeek +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/archive-log +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/check-config +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/crash-diag +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/delete-log +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/expire-crash +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/expire-logs +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/helpers/check-pid +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/helpers/df +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/helpers/first-line +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/helpers/start +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/helpers/stop +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/helpers/to-bytes.awk +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/helpers/top +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/make-archive-name +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/post-terminate +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/postprocessors/summarize-connections +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/run-zeek +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/run-zeek-on-trace +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/send-mail +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/set-zeek-path +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/stats-to-csv +%%ZEEKCTL%%%%DATADIR%%ctl/scripts/zeekctl-config.sh +%%ZEEKCTL%%spool/zeekctl-config.sh +%%ZEEKCTL%%@preunexec rm -f %D/logs/current +%%ZEEKCTL%%@preunexec rm -f %D/spool/zeekctl.dat +%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/zeekctl-config.bro +%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/local-networks.bro +%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/standalone-layout.bro +%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-logger.bro +%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-manager.bro +%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-proxy.bro +%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-worker.bro +%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local.bro +%%ZEEKCTL%%@preunexec rm -f %D/spool/state.db +%%ZEEKCTL%%@dir spool/tmp +%%ZEEKCTL%%@dir spool/installed-scripts-do-not-touch/site +%%ZEEKCTL%%@dir spool/installed-scripts-do-not-touch/auto +%%ZEEKCTL%%@dir spool/installed-scripts-do-not-touch +%%ZEEKCTL%%@dir spool +%%ZEEKCTL%%@dir %%DATADIR%%ctl/scripts/postprocessors +%%ZEEKCTL%%@dir %%DATADIR%%ctl/scripts/helpers +%%ZEEKCTL%%@dir %%DATADIR%%ctl/scripts +%%ZEEKCTL%%@dir %%DATADIR%%ctl +@dir %%DATADIR%%/zeekygen +%%ZEEKCTL%%@dir %%DATADIR%%/zeekctl @dir %%DATADIR%%/site @dir %%DATADIR%%/policy/tuning/defaults @dir %%DATADIR%%/policy/tuning @@ -1722,6 +1781,7 @@ @dir %%DATADIR%%/policy/protocols/smb @dir %%DATADIR%%/policy/protocols/rdp @dir %%DATADIR%%/policy/protocols/mysql +@dir %%DATADIR%%/policy/protocols/mqtt @dir %%DATADIR%%/policy/protocols/modbus @dir %%DATADIR%%/policy/protocols/krb @dir %%DATADIR%%/policy/protocols/http @@ -1739,7 +1799,9 @@ @dir %%DATADIR%%/policy/frameworks/signatures @dir %%DATADIR%%/policy/frameworks/packet-filter @dir %%DATADIR%%/policy/frameworks/notice/extend-email +@dir %%DATADIR%%/policy/frameworks/notice/actions @dir %%DATADIR%%/policy/frameworks/notice +@dir %%DATADIR%%/policy/frameworks/netcontrol @dir %%DATADIR%%/policy/frameworks/intel/seen @dir %%DATADIR%%/policy/frameworks/intel @dir %%DATADIR%%/policy/frameworks/files @@ -1747,10 +1809,9 @@ @dir %%DATADIR%%/policy/frameworks/control @dir %%DATADIR%%/policy/frameworks @dir %%DATADIR%%/policy/files/x509 +@dir %%DATADIR%%/policy/files/unified2 @dir %%DATADIR%%/policy/files @dir %%DATADIR%%/policy -@dir %%DATADIR%%/broxygen -%%BROCTL%%@dir %%DATADIR%%/broctl @dir %%DATADIR%%/base/utils @dir %%DATADIR%%/base/protocols/xmpp @dir %%DATADIR%%/base/protocols/tunnels @@ -1766,8 +1827,10 @@ @dir %%DATADIR%%/base/protocols/rdp @dir %%DATADIR%%/base/protocols/radius @dir %%DATADIR%%/base/protocols/pop3 +@dir %%DATADIR%%/base/protocols/ntp @dir %%DATADIR%%/base/protocols/ntlm @dir %%DATADIR%%/base/protocols/mysql +@dir %%DATADIR%%/base/protocols/mqtt @dir %%DATADIR%%/base/protocols/modbus @dir %%DATADIR%%/base/protocols/krb @dir %%DATADIR%%/base/protocols/irc @@ -1811,7 +1874,6 @@ @dir %%DATADIR%%/base/frameworks/analyzer @dir %%DATADIR%%/base/frameworks @dir %%DATADIR%%/base/files/x509 -@dir %%DATADIR%%/base/files/unified2 @dir %%DATADIR%%/base/files/pe @dir %%DATADIR%%/base/files/hash @dir %%DATADIR%%/base/files/extract @@ -1820,14 +1882,15 @@ @dir %%DATADIR%%/base/bif @dir %%DATADIR%%/base @dir %%DATADIR%% -%%BROCTL%%@dir logs -%%BROCTL%%@dir lib/broctl/plugins -%%BROCTL%%@dir lib/broctl/broker -%%BROCTL%%@dir lib/broctl/BroControl -%%BROCTL%%@dir lib/broctl -%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap/scripts -%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap/lib -%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap/broctl -%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap -@dir lib/bro/plugins -%%BROCTL%%@postexec su -fm %%BROUSER%% -c '%D/bin/broctl install; rm -f %D/spool/debug.log' +%%ZEEKCTL%%@dir logs +%%ZEEKCTL%%@dir lib/zeekctl/plugins +%%ZEEKCTL%%@dir lib/zeekctl/broker +%%ZEEKCTL%%@dir lib/zeekctl/ZeekControl +%%ZEEKCTL%%@dir lib/zeekctl/BroControl +%%ZEEKCTL%%@dir lib/zeekctl +%%NETMAP%%@dir lib/zeek/plugins/Bro_Netmap/scripts +%%NETMAP%%@dir lib/zeek/plugins/Bro_Netmap/lib +%%NETMAP%%@dir lib/zeek/plugins/Bro_Netmap/broctl +%%NETMAP%%@dir lib/zeek/plugins/Bro_Netmap +@dir lib/zeek/plugins +%%ZEEKCTL%%@postexec su -fm %%ZEEKUSER%% -c '%D/bin/zeekctl install; rm -f %D/spool/debug.log'