Page MenuHomeFreeBSD
Files F159926813

D22376.id64358.diff
No OneTemporary
Actions

D22376.id64358.diff
View Options

Index: GIDs
===================================================================
--- GIDs
+++ GIDs
@@ -722,7 +722,7 @@
bitcoin:*:779:
zetacoin:*:780:
monero:*:781:
-# free: 782
+zeek:*:782
# free: 783
# free: 784
# free: 785
Index: UIDs
===================================================================
--- UIDs
+++ UIDs
@@ -727,7 +727,7 @@
bitcoin:*:779:779::0:0:bitcoin Daemon:/var/db/bitcoin:/usr/sbin/nologin
zetacoin:*:780:780::0:0:ZetaCoin Daemon:/nonexistent:/usr/sbin/nologin
monero:*:781:781::0:0:Monero Daemon:/var/db/monero:/usr/sbin/nologin
-# free: 782
+zeek:*:782:782::0:0:Zeek Network Security Monitor:/nonexistent:/usr/sbin/nologin
# free: 783
# free: 784
# free: 785
Index: security/Makefile
===================================================================
--- security/Makefile
+++ security/Makefile
@@ -1329,6 +1329,7 @@
SUBDIR += yubikey-personalization-gui
SUBDIR += yubioath-desktop
SUBDIR += zebedee
+ SUBDIR += zeek
SUBDIR += zenmap
SUBDIR += zeronet
SUBDIR += zxid
Index: security/zeek/Makefile
===================================================================
--- security/zeek/Makefile
+++ security/zeek/Makefile
@@ -1,9 +1,8 @@
# Created by: David O'Brien <obrien@FreeBSD.org>
# $FreeBSD$
-PORTNAME= bro
-PORTVERSION= 2.6.4
-PORTREVISION= 1
+PORTNAME= zeek
+PORTVERSION= 3.0.0
CATEGORIES= security
MASTER_SITES= https://www.zeek.org/downloads/
DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
@@ -20,18 +19,20 @@
CMAKE_ARGS+= -DPYTHON_EXECUTABLE:PATH=${PYTHON_CMD}
CXXFLAGS+= -std=c++11 -Wall
-SHEBANG_FILES= aux/broctl/aux/trace-summary/trace-summary
+CONFLICTS= bro
+
+SHEBANG_FILES= aux/zeekctl/aux/trace-summary/trace-summary
SUB_FILES= pkg-message
NO_MTREE= yes
CMAKE_ARGS+= -GNinja \
-D CMAKE_INSTALL_PREFIX:PATH=${PREFIX} \
- -D BRO_ROOT_DIR:PATH=${PREFIX} \
- -D PY_MOD_INSTALL_DIR:PATH=${PREFIX}/lib/broctl \
- -D BRO_SCRIPT_INSTALL_PATH:PATH=${PREFIX}/share/bro \
- -D BRO_ETC_INSTALL_DIR:PATH=${PREFIX}/etc \
- -D BRO_MAN_INSTALL_PATH=${MANPREFIX}/man \
+ -D ZEEK_ROOT_DIR:PATH=${PREFIX} \
+ -D PY_MOD_INSTALL_DIR:PATH=${PREFIX}/lib/zeekctl \
+ -D ZEEK_SCRIPT_INSTALL_PATH:PATH=${PREFIX}/share/zeek \
+ -D ZEEK_ETC_INSTALL_DIR:PATH=${PREFIX}/etc \
+ -D ZEEK_MAN_INSTALL_PATH=${MANPREFIX}/man \
-D ENABLE_PERFTOOLS:BOOL=false \
-D ENABLE_PERFTOOLS_DEBUG:BOOL=false \
-D BinPAC_SKIP_INSTALL:BOOL=true \
@@ -40,23 +41,22 @@
-D BUILD_STATIC_BROKER:BOOL=true \
-D CMAKE_EXE_LINKER_FLAGS="${OPENSSL_LDFLAGS}"
-BROUSER?= bro
-BROGROUP?= bro
+ZEEKUSER?= zeek
+ZEEKGROUP?= zeek
PLIST_SUB+= ARCH=${ARCH} \
- BROUSER=${BROUSER} \
- BROGROUP=${BROGROUP} \
+ ZEEKUSER=${ZEEKUSER} \
+ ZEEKGROUP=${ZEEKGROUP} \
LCASE_OPSYS=${OPSYS:tl}
-USERS= ${BROUSER}
-GROUPS= ${BROGROUP}
+USERS= ${ZEEKUSER}
+GROUPS= ${ZEEKGROUP}
-OPTIONS_DEFINE= BROCCOLI BROCTL BROKER DEBUG GEOIP2 IPSUMDUMP LBL_CF \
- LBL_HF NETMAP PERFTOOLS
-OPTIONS_DEFAULT=BROCTL BROKER GEOIP2 IPSUMDUMP LBL_CF LBL_HF NETMAP
+OPTIONS_DEFINE= BROCCOLI BROKER DEBUG GEOIP2 IPSUMDUMP LBL_CF LBL_HF \
+ NETMAP PERFTOOLS ZEEKCTL
+OPTIONS_DEFAULT=BROKER GEOIP2 IPSUMDUMP LBL_CF LBL_HF NETMAP ZEEKCTL
OPTIONS_SUB= yes
BROCCOLI_DESC= Build support for libbroccoli communications (DEPRECATED)
-BROCTL_DESC= BroControl support (implies BROKER and IPSUMDUMP)
BROKER_DESC= Enable the Broker communication library
GEOIP2_DESC= Build with GeoIP2 (MaxMindDB) support
IPSUMDUMP_DESC= Enables traffic summaries
@@ -64,16 +64,11 @@
LBL_HF_DESC= Address to hostname filter support
NETMAP_DESC= Native Netmap Packet IOSource for Bro
PERFTOOLS_DESC= Use Perftools to improve memory & CPU usage
+ZEEKCTL_DESC= ZeekControl support (implies BROKER and IPSUMDUMP)
-BROCTL_IMPLIES= BROKER IPSUMDUMP
+ZEEKCTL_IMPLIES= BROKER IPSUMDUMP
BROCCOLI_LIB_DEPENDS= libbroccoli.so:security/broccoli
-BROCTL_BUILD_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \
- ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} \
- swig3.0:devel/swig30
-BROCTL_RUN_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \
- ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR}
-BROCTL_CMAKE_BOOL= INSTALL_BROCTL
GEOIP2_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb
IPSUMDUMP_BUILD_DEPENDS=ipsumdump:net/ipsumdump
IPSUMDUMP_RUN_DEPENDS= ipsumdump:net/ipsumdump
@@ -82,40 +77,46 @@
DEBUG_CMAKE_BOOL= ENABLE_DEBUG
LBL_HF_RUN_DEPENDS= ${LOCALBASE}/bin/hf:sysutils/lbl-hf
LBL_CF_RUN_DEPENDS= ${LOCALBASE}/bin/cf:sysutils/lbl-cf
-NETMAP_GH_TUPLE= bro:bro-netmap:cf88debf487b31ab30dc3b5bac64783b4e49997e:bro_netmap
+NETMAP_GH_TUPLE= bro:bro-netmap:f3620df:bro_netmap
NETMAP_USE= GITHUB=nodefault
PERFTOOLS_CMAKE_BOOL= ENABLE_PERFTOOLS
PERFTOOLS_RUN_DEPENDS= ${LOCALBASE}/bin/perftools-pprof:devel/google-perftools
PYTHON_BUILD_DEPENDS= swig3.0:devel/swig30
+ZEEKCTL_BUILD_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \
+ ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} \
+ swig3.0:devel/swig30
+ZEEKCTL_RUN_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \
+ ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR}
+ZEEKCTL_CMAKE_BOOL= INSTALL_ZEEKCTL
.include <bsd.port.options.mk>
-.if ${PORT_OPTIONS:MBROCTL}
-USE_RC_SUBR= bro
+.if ${PORT_OPTIONS:MZEEKCTL}
+USE_RC_SUBR= zeek
.endif
-post-install-BROCTL-on:
+post-install-ZEEKCTL-on:
${MKDIR} ${STAGEDIR}${PREFIX}/logs
${MKDIR} ${STAGEDIR}${PREFIX}/spool/tmp
${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/auto
${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/site
-.for F in broctl.cfg networks.cfg node.cfg
+.for F in zeekctl.cfg networks.cfg node.cfg
${MV} ${STAGEDIR}${PREFIX}/etc/${F} ${STAGEDIR}${PREFIX}/etc/${F}.example
.endfor
- ${RM} ${STAGEDIR}${PREFIX}/share/broctl/scripts/broctl-config.sh
- ${LN} -s ../../../spool/broctl-config.sh \
- ${STAGEDIR}${PREFIX}/share/broctl/scripts/broctl-config.sh
+ ${RM} ${STAGEDIR}${PREFIX}/share/zeekctl/scripts/zeekctl-config.sh
+ ${LN} -s ../../../spool/zeekctl-config.sh \
+ ${STAGEDIR}${PREFIX}/share/zeekctl/scripts/zeekctl-config.sh
post-install:
- ${RM} -r ${STAGEDIR}${PREFIX}/share/bro/cmake
+ ${RM} -r ${STAGEDIR}${PREFIX}/share/zeek/cmake
-pre-install-BROCTL-on:
+pre-install-ZEEKCTL-on:
${MKDIR} ${STAGEDIR}${PREFIX}/etc/rc.d
post-build-NETMAP-on:
${LN} -s ../.build ${WRKSRC}/build
(cd ${WRKSRC_bro_netmap} && ./configure --bro-dist=${WRKSRC} \
- --install-root=${STAGEDIR}${PREFIX}/lib/bro/plugins && \
+ --install-root=${STAGEDIR}${PREFIX}/lib/zeek/plugins && \
make && make install)
.include <bsd.port.mk>
Index: security/zeek/distinfo
===================================================================
--- security/zeek/distinfo
+++ security/zeek/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1568760632
-SHA256 (bro-2.6.4.tar.gz) = a47a9cdcef0ea14d5f70c390ab266f0333063ff96f3869a5f1609581a1d1ceb7
-SIZE (bro-2.6.4.tar.gz) = 28481281
-SHA256 (bro-bro-netmap-cf88debf487b31ab30dc3b5bac64783b4e49997e_GH0.tar.gz) = 383423f92932c3ef244194954708b3a237b4f37ebc358014f51dcb3b9786896b
-SIZE (bro-bro-netmap-cf88debf487b31ab30dc3b5bac64783b4e49997e_GH0.tar.gz) = 24630
+TIMESTAMP = 1573594504
+SHA256 (zeek-3.0.0.tar.gz) = b552940a14132bcbbd9afdf6476ec615b5a44a6d15f78b2cdc15860fa02bff9a
+SIZE (zeek-3.0.0.tar.gz) = 29252635
+SHA256 (bro-bro-netmap-f3620df_GH0.tar.gz) = e51f420781c9a01b0494f93d82f94a1b045725c1cff406c33887974a9940c655
+SIZE (bro-bro-netmap-f3620df_GH0.tar.gz) = 24661
Index: security/zeek/files/zeek.in
===================================================================
--- security/zeek/files/zeek.in
+++ security/zeek/files/zeek.in
@@ -1,80 +1,80 @@
#!/bin/sh
#
-# $FreeBSD: head/security/bro/files/bro.in 448446 2017-08-21 02:12:48Z swills $
+# $FreeBSD$
#
-# PROVIDE: bro
+# PROVIDE: zeek
# REQUIRE: NETWORKING
# REQUIRE: LOGIN FILESYSTEMS
# KEYWORD: shutdown
. /etc/rc.subr
-name="bro"
+name="zeek"
rcvar=`set_rcvar`
node=$2
-start_cmd="bro_start"
-stop_cmd="bro_stop"
-restart_cmd="bro_restart"
-deploy_cmd="bro_deploy"
-install_cmd="bro_install"
-cleanup_cmd="bro_cleanup"
-restart_cmd="bro_restart"
-status_cmd="bro_status"
+start_cmd="zeek_start"
+stop_cmd="zeek_stop"
+restart_cmd="zeek_restart"
+deploy_cmd="zeek_deploy"
+install_cmd="zeek_install"
+cleanup_cmd="zeek_cleanup"
+restart_cmd="zeek_restart"
+status_cmd="zeek_status"
extra_commands="deploy install cleanup status restart"
-: ${broctl_program:=%%PREFIX%%/bin/broctl}
+: ${zeekctl_program:=%%PREFIX%%/bin/zeekctl}
-bro_enable=${bro_enable-"NO"}
+zeek_enable=${zeek_enable-"NO"}
-bro_start() {
+zeek_start() {
if [ ! "${node}" ];
then
- $broctl_program start
+ $zeekctl_program start
else
- $broctl_program start $node
+ $zeekctl_program start $node
fi
}
bro_stop() {
if [ ! "${node}" ];
then
- $broctl_program stop
+ $zeekctl_program stop
else
- $broctl_program stop $node
+ $zeekctl_program stop $node
fi
}
-bro_restart() {
+zeek_restart() {
if [ ! "${node}" ];
then
- $broctl_program restart
+ $zeekctl_program restart
else
- $broctl_program restart $node
+ $zeekctl_program restart $node
fi
}
-bro_deploy() {
- $broctl_program deploy
+zeek_deploy() {
+ $zeekctl_program deploy
}
-bro_install() {
- $broctl_program install
+zeek_install() {
+ $zeekctl_program install
}
-bro_cleanup() {
+zeek_cleanup() {
if [ ! "${node}" ];
then
- $broctl_program cleanup
+ $zeekctl_program cleanup
else
- $broctl_program cleanup ${node}
+ $zeekctl_program cleanup ${node}
fi
}
-bro_status() {
- $broctl_program status
+zeek_status() {
+ $zeekctl_program status
}
load_rc_config $name
Index: security/zeek/pkg-descr
===================================================================
--- security/zeek/pkg-descr
+++ security/zeek/pkg-descr
@@ -1,13 +1,15 @@
-Bro is an open-source, Unix-based Network Intrusion Detection System (NIDS)
-that passively monitors network traffic and looks for suspicious activity.
-Bro detects intrusions by first parsing network traffic to extract its
-application-level semantics and then executing event-oriented analyzers that
-compare the activity with patterns deemed troublesome. Its analysis includes
-detection of specific attacks (including those defined by signatures, but
-also those defined in terms of events) and unusual activities (e.g., certain
-hosts connecting to certain services, or patterns of failed connection
-attempts).
+Zeek (formally known as Bro) is an open-source, Unix-based Network
+Intrusion Detection System (NIDS) that passively monitors network
+traffic and looks for suspicious activity. Zeek detects intrusions
+by first parsing network traffic to extract its application-level
+semantics and then executing event-oriented analyzers that compare
+the activity with patterns deemed troublesome. Its analysis includes
+detection of specific attacks (including those defined by signatures,
+but also those defined in terms of events) and unusual activities
+(e.g., certain hosts connecting to certain services, or patterns
+of failed connection attempts).
-Bro is documented in the USENIX 1998 Security Conference proceedings.
+Zeek is documented in the USENIX 1998 Security Conference proceedings
+(as Bro).
-WWW: https://www.bro.org/
+WWW: https://www.zeek.org/
Index: security/zeek/pkg-plist
===================================================================
--- security/zeek/pkg-plist
+++ security/zeek/pkg-plist
@@ -1,576 +1,36 @@
-@postexec chown %%BROUSER%%:%%BROGROUP%% %D/logs
-%%BROCTL%%@postexec chown %%BROUSER%%:%%BROGROUP%% %D/spool
-%%BROCTL%%@postexec chown %%BROUSER%%:%%BROGROUP%% %D/spool/tmp
-%%BROCTL%%@postexec chown -R %%BROUSER%%:%%BROGROUP%% %D/spool/installed-scripts-do-not-touch
+@postexec chown %%ZEEKUSER%%:%%ZEEKGROUP%% %D/logs
+%%ZEEKCTL%%@postexec chown %%ZEEKUSER%%:%%ZEEKGROUP%% %D/spool
+%%ZEEKCTL%%@postexec chown %%ZEEKUSER%%:%%ZEEKGROUP%% %D/spool/tmp
+%%ZEEKCTL%%@postexec chown -R %%ZEEKUSER%%:%%ZEEKGROUP%% %D/spool/installed-scripts-do-not-touch
bin/bifcl
bin/binpac
bin/bro
bin/bro-config
bin/bro-cut
-%%BROCTL%%bin/broctl
-%%BROCTL%%bin/capstats
-%%BROCTL%%bin/trace-summary
-%%BROCTL%%@preunexec if cmp -s %D/etc/broctl.cfg.example %D/etc/broctl.cfg ; then rm -f %D/etc/broctl.cfg; fi
-%%BROCTL%%etc/broctl.cfg.example
-%%BROCTL%%@postexec if [ ! -f %D/etc/broctl.cfg ] ; then cp -p %D/etc/broctl.cfg.example %D/etc/broctl.cfg; fi
-%%BROCTL%%@preunexec if cmp -s %D/etc/networks.cfg.example %D/etc/networks.cfg ; then rm -f %D/etc/networks.cfg; fi
-%%BROCTL%%etc/networks.cfg.example
-%%BROCTL%%@postexec if [ ! -f %D/etc/networks.cfg ] ; then cp -p %D/etc/networks.cfg.example %D/etc/networks.cfg; fi
-%%BROCTL%%@preunexec if cmp -s %D/etc/node.cfg.example %D/etc/node.cfg ; then rm -f %D/etc/node.cfg; fi
-%%BROCTL%%etc/node.cfg.example
-%%BROCTL%%@postexec if [ ! -f %D/etc/node.cfg ] ; then cp -p %D/etc/node.cfg.example %D/etc/node.cfg; fi
+bin/broctl
+%%ZEEKCTL%%bin/capstats
+bin/paraglob-test
+%%ZEEKCTL%%bin/trace-summary
+bin/zeek
+bin/zeek-config
+bin/zeek-cut
+bin/zeek-wrapper
+%%ZEEKCTL%%bin/zeekctl
+%%ZEEKCTL%%@preunexec if cmp -s %D/etc/networks.cfg.example %D/etc/networks.cfg ; then rm -f %D/etc/networks.cfg; fi
+%%ZEEKCTL%%etc/networks.cfg.example
+%%ZEEKCTL%%@postexec if [ ! -f %D/etc/networks.cfg ] ; then cp -p %D/etc/networks.cfg.example %D/etc/networks.cfg; fi
+%%ZEEKCTL%%@preunexec if cmp -s %D/etc/node.cfg.example %D/etc/node.cfg ; then rm -f %D/etc/node.cfg; fi
+%%ZEEKCTL%%etc/node.cfg.example
+%%ZEEKCTL%%@postexec if [ ! -f %D/etc/node.cfg ] ; then cp -p %D/etc/node.cfg.example %D/etc/node.cfg; fi
+%%ZEEKCTL%%@preunexec if cmp -s %D/etc/zeekctl.cfg.example %D/etc/zeekctl.cfg ; then rm -f %D/etc/zeekctl.cfg; fi
+%%ZEEKCTL%%etc/zeekctl.cfg.example
+%%ZEEKCTL%%@postexec if [ ! -f %D/etc/zeekctl.cfg ] ; then cp -p %D/etc/zeekctl.cfg.example %D/etc/zeekctl.cfg; fi
include/binpac/binpac.h
include/binpac/binpac_analyzer.h
include/binpac/binpac_buffer.h
include/binpac/binpac_bytestring.h
include/binpac/binpac_exception.h
include/binpac/binpac_regex.h
-include/bro/3rdparty/sqlite3.h
-include/bro/Anon.h
-include/bro/Attr.h
-include/bro/Base64.h
-include/bro/BroList.h
-include/bro/BroString.h
-include/bro/Brofiler.h
-include/bro/CCL.h
-include/bro/ChunkedIO.h
-include/bro/CompHash.h
-include/bro/Conn.h
-include/bro/Continuation.h
-include/bro/ConvertUTF.h
-include/bro/DFA.h
-include/bro/DNS_Mgr.h
-include/bro/DbgBreakpoint.h
-include/bro/DbgDisplay.h
-include/bro/DbgWatch.h
-include/bro/Debug.h
-include/bro/DebugCmdInfoConstants.h
-include/bro/DebugCmds.h
-include/bro/DebugLogger.h
-include/bro/Desc.h
-include/bro/Dict.h
-include/bro/Discard.h
-include/bro/EquivClass.h
-include/bro/Event.h
-include/bro/EventHandler.h
-include/bro/EventLauncher.h
-include/bro/EventRegistry.h
-include/bro/Expr.h
-include/bro/File.h
-include/bro/Flare.h
-include/bro/Frag.h
-include/bro/Frame.h
-include/bro/Func.h
-include/bro/Hash.h
-include/bro/ID.h
-include/bro/IP.h
-include/bro/IPAddr.h
-include/bro/IntSet.h
-include/bro/List.h
-include/bro/NFA.h
-include/bro/Net.h
-include/bro/NetVar.h
-include/bro/OSFinger.h
-include/bro/Obj.h
-include/bro/Op.h
-include/bro/OpaqueVal.h
-include/bro/PacketDumper.h
-include/bro/PacketFilter.h
-include/bro/PersistenceSerializer.h
-include/bro/Pipe.h
-include/bro/PolicyFile.h
-include/bro/PrefixTable.h
-include/bro/PriorityQueue.h
-include/bro/Queue.h
-include/bro/RE.h
-include/bro/RandTest.h
-include/bro/Reassem.h
-include/bro/RemoteSerializer.h
-include/bro/Reporter.h
-include/bro/Rule.h
-include/bro/RuleAction.h
-include/bro/RuleCondition.h
-include/bro/RuleMatcher.h
-include/bro/Scope.h
-include/bro/SerialInfo.h
-include/bro/SerialObj.h
-include/bro/SerialTypes.h
-include/bro/SerializationFormat.h
-include/bro/Serializer.h
-include/bro/Sessions.h
-include/bro/SmithWaterman.h
-include/bro/StateAccess.h
-include/bro/Stats.h
-include/bro/Stmt.h
-include/bro/StmtEnums.h
-include/bro/Tag.h
-include/bro/Timer.h
-include/bro/Traverse.h
-include/bro/TraverseTypes.h
-include/bro/Trigger.h
-include/bro/TunnelEncapsulation.h
-include/bro/Type.h
-include/bro/UID.h
-include/bro/Val.h
-include/bro/Var.h
-include/bro/analyzer/Analyzer.h
-include/bro/analyzer/Component.h
-include/bro/analyzer/Manager.h
-include/bro/analyzer/Tag.h
-include/bro/analyzer/analyzer.bif.h
-include/bro/analyzer/protocol/arp/ARP.h
-include/bro/analyzer/protocol/arp/events.bif.h
-include/bro/analyzer/protocol/asn1/asn1.pac
-include/bro/analyzer/protocol/ayiya/AYIYA.h
-include/bro/analyzer/protocol/ayiya/ayiya-analyzer.pac
-include/bro/analyzer/protocol/ayiya/ayiya-protocol.pac
-include/bro/analyzer/protocol/ayiya/ayiya.pac
-include/bro/analyzer/protocol/backdoor/BackDoor.h
-include/bro/analyzer/protocol/backdoor/events.bif.h
-include/bro/analyzer/protocol/bittorrent/BitTorrent.h
-include/bro/analyzer/protocol/bittorrent/BitTorrentTracker.h
-include/bro/analyzer/protocol/bittorrent/bittorrent-analyzer.pac
-include/bro/analyzer/protocol/bittorrent/bittorrent-protocol.pac
-include/bro/analyzer/protocol/bittorrent/bittorrent.pac
-include/bro/analyzer/protocol/bittorrent/events.bif.h
-include/bro/analyzer/protocol/conn-size/ConnSize.h
-include/bro/analyzer/protocol/conn-size/events.bif.h
-include/bro/analyzer/protocol/conn-size/functions.bif.h
-include/bro/analyzer/protocol/dce-rpc/DCE_RPC.h
-include/bro/analyzer/protocol/dce-rpc/consts.bif.h
-include/bro/analyzer/protocol/dce-rpc/dce_rpc-analyzer.pac
-include/bro/analyzer/protocol/dce-rpc/dce_rpc-auth.pac
-include/bro/analyzer/protocol/dce-rpc/dce_rpc-protocol.pac
-include/bro/analyzer/protocol/dce-rpc/dce_rpc.pac
-include/bro/analyzer/protocol/dce-rpc/endpoint-atsvc.pac
-include/bro/analyzer/protocol/dce-rpc/endpoint-epmapper.pac
-include/bro/analyzer/protocol/dce-rpc/events.bif.h
-include/bro/analyzer/protocol/dce-rpc/types.bif.h
-include/bro/analyzer/protocol/dhcp/DHCP.h
-include/bro/analyzer/protocol/dhcp/dhcp-analyzer.pac
-include/bro/analyzer/protocol/dhcp/dhcp-options.pac
-include/bro/analyzer/protocol/dhcp/dhcp-protocol.pac
-include/bro/analyzer/protocol/dhcp/dhcp.pac
-include/bro/analyzer/protocol/dhcp/events.bif.h
-include/bro/analyzer/protocol/dhcp/types.bif.h
-include/bro/analyzer/protocol/dnp3/DNP3.h
-include/bro/analyzer/protocol/dnp3/dnp3-analyzer.pac
-include/bro/analyzer/protocol/dnp3/dnp3-objects.pac
-include/bro/analyzer/protocol/dnp3/dnp3-protocol.pac
-include/bro/analyzer/protocol/dnp3/dnp3.pac
-include/bro/analyzer/protocol/dnp3/events.bif.h
-include/bro/analyzer/protocol/dns/DNS.h
-include/bro/analyzer/protocol/dns/events.bif.h
-include/bro/analyzer/protocol/file/File.h
-include/bro/analyzer/protocol/file/events.bif.h
-include/bro/analyzer/protocol/finger/Finger.h
-include/bro/analyzer/protocol/finger/events.bif.h
-include/bro/analyzer/protocol/ftp/FTP.h
-include/bro/analyzer/protocol/ftp/events.bif.h
-include/bro/analyzer/protocol/ftp/functions.bif.h
-include/bro/analyzer/protocol/gnutella/Gnutella.h
-include/bro/analyzer/protocol/gnutella/events.bif.h
-include/bro/analyzer/protocol/gssapi/GSSAPI.h
-include/bro/analyzer/protocol/gssapi/events.bif.h
-include/bro/analyzer/protocol/gssapi/gssapi-analyzer.pac
-include/bro/analyzer/protocol/gssapi/gssapi-protocol.pac
-include/bro/analyzer/protocol/gssapi/gssapi.pac
-include/bro/analyzer/protocol/gtpv1/GTPv1.h
-include/bro/analyzer/protocol/gtpv1/events.bif.h
-include/bro/analyzer/protocol/gtpv1/gtpv1-analyzer.pac
-include/bro/analyzer/protocol/gtpv1/gtpv1-protocol.pac
-include/bro/analyzer/protocol/gtpv1/gtpv1.pac
-include/bro/analyzer/protocol/http/HTTP.h
-include/bro/analyzer/protocol/http/events.bif.h
-include/bro/analyzer/protocol/http/functions.bif.h
-include/bro/analyzer/protocol/icmp/ICMP.h
-include/bro/analyzer/protocol/icmp/events.bif.h
-include/bro/analyzer/protocol/ident/Ident.h
-include/bro/analyzer/protocol/ident/events.bif.h
-include/bro/analyzer/protocol/imap/IMAP.h
-include/bro/analyzer/protocol/imap/events.bif.h
-include/bro/analyzer/protocol/imap/imap-analyzer.pac
-include/bro/analyzer/protocol/imap/imap-protocol.pac
-include/bro/analyzer/protocol/imap/imap.pac
-include/bro/analyzer/protocol/interconn/InterConn.h
-include/bro/analyzer/protocol/interconn/events.bif.h
-include/bro/analyzer/protocol/irc/IRC.h
-include/bro/analyzer/protocol/irc/events.bif.h
-include/bro/analyzer/protocol/krb/KRB.h
-include/bro/analyzer/protocol/krb/KRB_TCP.h
-include/bro/analyzer/protocol/krb/events.bif.h
-include/bro/analyzer/protocol/krb/krb-analyzer.pac
-include/bro/analyzer/protocol/krb/krb-asn1.pac
-include/bro/analyzer/protocol/krb/krb-defs.pac
-include/bro/analyzer/protocol/krb/krb-padata.pac
-include/bro/analyzer/protocol/krb/krb-protocol.pac
-include/bro/analyzer/protocol/krb/krb-types.pac
-include/bro/analyzer/protocol/krb/krb.pac
-include/bro/analyzer/protocol/krb/krb_TCP.pac
-include/bro/analyzer/protocol/krb/types.bif.h
-include/bro/analyzer/protocol/login/Login.h
-include/bro/analyzer/protocol/login/NVT.h
-include/bro/analyzer/protocol/login/RSH.h
-include/bro/analyzer/protocol/login/Rlogin.h
-include/bro/analyzer/protocol/login/Telnet.h
-include/bro/analyzer/protocol/login/events.bif.h
-include/bro/analyzer/protocol/login/functions.bif.h
-include/bro/analyzer/protocol/mime/MIME.h
-include/bro/analyzer/protocol/mime/events.bif.h
-include/bro/analyzer/protocol/modbus/Modbus.h
-include/bro/analyzer/protocol/modbus/events.bif.h
-include/bro/analyzer/protocol/modbus/modbus-analyzer.pac
-include/bro/analyzer/protocol/modbus/modbus-protocol.pac
-include/bro/analyzer/protocol/modbus/modbus.pac
-include/bro/analyzer/protocol/mysql/MySQL.h
-include/bro/analyzer/protocol/mysql/events.bif.h
-include/bro/analyzer/protocol/mysql/mysql-analyzer.pac
-include/bro/analyzer/protocol/mysql/mysql-protocol.pac
-include/bro/analyzer/protocol/mysql/mysql.pac
-include/bro/analyzer/protocol/ncp/NCP.h
-include/bro/analyzer/protocol/ncp/consts.bif.h
-include/bro/analyzer/protocol/ncp/events.bif.h
-include/bro/analyzer/protocol/ncp/ncp.pac
-include/bro/analyzer/protocol/netbios/NetbiosSSN.h
-include/bro/analyzer/protocol/netbios/events.bif.h
-include/bro/analyzer/protocol/netbios/functions.bif.h
-include/bro/analyzer/protocol/ntlm/NTLM.h
-include/bro/analyzer/protocol/ntlm/events.bif.h
-include/bro/analyzer/protocol/ntlm/ntlm-analyzer.pac
-include/bro/analyzer/protocol/ntlm/ntlm-protocol.pac
-include/bro/analyzer/protocol/ntlm/ntlm.pac
-include/bro/analyzer/protocol/ntlm/types.bif.h
-include/bro/analyzer/protocol/ntp/NTP.h
-include/bro/analyzer/protocol/ntp/events.bif.h
-include/bro/analyzer/protocol/pia/PIA.h
-include/bro/analyzer/protocol/pop3/POP3.h
-include/bro/analyzer/protocol/pop3/events.bif.h
-include/bro/analyzer/protocol/radius/RADIUS.h
-include/bro/analyzer/protocol/radius/events.bif.h
-include/bro/analyzer/protocol/radius/radius-analyzer.pac
-include/bro/analyzer/protocol/radius/radius-protocol.pac
-include/bro/analyzer/protocol/radius/radius.pac
-include/bro/analyzer/protocol/rdp/RDP.h
-include/bro/analyzer/protocol/rdp/events.bif.h
-include/bro/analyzer/protocol/rdp/rdp-analyzer.pac
-include/bro/analyzer/protocol/rdp/rdp-protocol.pac
-include/bro/analyzer/protocol/rdp/rdp.pac
-include/bro/analyzer/protocol/rdp/types.bif.h
-include/bro/analyzer/protocol/rfb/RFB.h
-include/bro/analyzer/protocol/rfb/events.bif.h
-include/bro/analyzer/protocol/rfb/rfb-analyzer.pac
-include/bro/analyzer/protocol/rfb/rfb-protocol.pac
-include/bro/analyzer/protocol/rfb/rfb.pac
-include/bro/analyzer/protocol/rpc/MOUNT.h
-include/bro/analyzer/protocol/rpc/NFS.h
-include/bro/analyzer/protocol/rpc/Portmap.h
-include/bro/analyzer/protocol/rpc/RPC.h
-include/bro/analyzer/protocol/rpc/XDR.h
-include/bro/analyzer/protocol/rpc/events.bif.h
-include/bro/analyzer/protocol/sip/SIP.h
-include/bro/analyzer/protocol/sip/SIP_TCP.h
-include/bro/analyzer/protocol/sip/events.bif.h
-include/bro/analyzer/protocol/sip/sip-analyzer.pac
-include/bro/analyzer/protocol/sip/sip-protocol.pac
-include/bro/analyzer/protocol/sip/sip.pac
-include/bro/analyzer/protocol/sip/sip_TCP.pac
-include/bro/analyzer/protocol/smb/SMB.h
-include/bro/analyzer/protocol/smb/consts.bif.h
-include/bro/analyzer/protocol/smb/events.bif.h
-include/bro/analyzer/protocol/smb/smb-common.pac
-include/bro/analyzer/protocol/smb/smb-gssapi.pac
-include/bro/analyzer/protocol/smb/smb-mailslot.pac
-include/bro/analyzer/protocol/smb/smb-pipe.pac
-include/bro/analyzer/protocol/smb/smb-strings.pac
-include/bro/analyzer/protocol/smb/smb-time.pac
-include/bro/analyzer/protocol/smb/smb.pac
-include/bro/analyzer/protocol/smb/smb1-com-check-directory.pac
-include/bro/analyzer/protocol/smb/smb1-com-close.pac
-include/bro/analyzer/protocol/smb/smb1-com-create-directory.pac
-include/bro/analyzer/protocol/smb/smb1-com-echo.pac
-include/bro/analyzer/protocol/smb/smb1-com-locking-andx.pac
-include/bro/analyzer/protocol/smb/smb1-com-logoff-andx.pac
-include/bro/analyzer/protocol/smb/smb1-com-negotiate.pac
-include/bro/analyzer/protocol/smb/smb1-com-nt-cancel.pac
-include/bro/analyzer/protocol/smb/smb1-com-nt-create-andx.pac
-include/bro/analyzer/protocol/smb/smb1-com-nt-transact.pac
-include/bro/analyzer/protocol/smb/smb1-com-query-information.pac
-include/bro/analyzer/protocol/smb/smb1-com-read-andx.pac
-include/bro/analyzer/protocol/smb/smb1-com-session-setup-andx.pac
-include/bro/analyzer/protocol/smb/smb1-com-transaction-secondary.pac
-include/bro/analyzer/protocol/smb/smb1-com-transaction.pac
-include/bro/analyzer/protocol/smb/smb1-com-transaction2-secondary.pac
-include/bro/analyzer/protocol/smb/smb1-com-transaction2.pac
-include/bro/analyzer/protocol/smb/smb1-com-tree-connect-andx.pac
-include/bro/analyzer/protocol/smb/smb1-com-tree-disconnect.pac
-include/bro/analyzer/protocol/smb/smb1-com-write-andx.pac
-include/bro/analyzer/protocol/smb/smb1-protocol.pac
-include/bro/analyzer/protocol/smb/smb1_com_check_directory.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_close.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_create_directory.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_echo.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_logoff_andx.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_negotiate.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_nt_cancel.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_nt_create_andx.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_query_information.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_read_andx.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_session_setup_andx.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_transaction.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_transaction2.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_transaction2_secondary.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_transaction_secondary.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_tree_connect_andx.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_tree_disconnect.bif.h
-include/bro/analyzer/protocol/smb/smb1_com_write_andx.bif.h
-include/bro/analyzer/protocol/smb/smb1_events.bif.h
-include/bro/analyzer/protocol/smb/smb2-com-close.pac
-include/bro/analyzer/protocol/smb/smb2-com-create.pac
-include/bro/analyzer/protocol/smb/smb2-com-ioctl.pac
-include/bro/analyzer/protocol/smb/smb2-com-lock.pac
-include/bro/analyzer/protocol/smb/smb2-com-negotiate.pac
-include/bro/analyzer/protocol/smb/smb2-com-read.pac
-include/bro/analyzer/protocol/smb/smb2-com-session-setup.pac
-include/bro/analyzer/protocol/smb/smb2-com-set-info.pac
-include/bro/analyzer/protocol/smb/smb2-com-tree-connect.pac
-include/bro/analyzer/protocol/smb/smb2-com-tree-disconnect.pac
-include/bro/analyzer/protocol/smb/smb2-com-write.pac
-include/bro/analyzer/protocol/smb/smb2-protocol.pac
-include/bro/analyzer/protocol/smb/smb2_com_close.bif.h
-include/bro/analyzer/protocol/smb/smb2_com_create.bif.h
-include/bro/analyzer/protocol/smb/smb2_com_negotiate.bif.h
-include/bro/analyzer/protocol/smb/smb2_com_read.bif.h
-include/bro/analyzer/protocol/smb/smb2_com_session_setup.bif.h
-include/bro/analyzer/protocol/smb/smb2_com_set_info.bif.h
-include/bro/analyzer/protocol/smb/smb2_com_tree_connect.bif.h
-include/bro/analyzer/protocol/smb/smb2_com_tree_disconnect.bif.h
-include/bro/analyzer/protocol/smb/smb2_com_write.bif.h
-include/bro/analyzer/protocol/smb/smb2_events.bif.h
-include/bro/analyzer/protocol/smb/types.bif.h
-include/bro/analyzer/protocol/smtp/SMTP.h
-include/bro/analyzer/protocol/smtp/events.bif.h
-include/bro/analyzer/protocol/smtp/functions.bif.h
-include/bro/analyzer/protocol/snmp/SNMP.h
-include/bro/analyzer/protocol/snmp/events.bif.h
-include/bro/analyzer/protocol/snmp/snmp-analyzer.pac
-include/bro/analyzer/protocol/snmp/snmp-protocol.pac
-include/bro/analyzer/protocol/snmp/snmp.pac
-include/bro/analyzer/protocol/snmp/types.bif.h
-include/bro/analyzer/protocol/socks/SOCKS.h
-include/bro/analyzer/protocol/socks/events.bif.h
-include/bro/analyzer/protocol/socks/socks-analyzer.pac
-include/bro/analyzer/protocol/socks/socks-protocol.pac
-include/bro/analyzer/protocol/socks/socks.pac
-include/bro/analyzer/protocol/ssh/SSH.h
-include/bro/analyzer/protocol/ssh/consts.pac
-include/bro/analyzer/protocol/ssh/events.bif.h
-include/bro/analyzer/protocol/ssh/ssh-analyzer.pac
-include/bro/analyzer/protocol/ssh/ssh-protocol.pac
-include/bro/analyzer/protocol/ssh/ssh.pac
-include/bro/analyzer/protocol/ssh/types.bif.h
-include/bro/analyzer/protocol/ssl/DTLS.h
-include/bro/analyzer/protocol/ssl/SSL.h
-include/bro/analyzer/protocol/ssl/dtls-analyzer.pac
-include/bro/analyzer/protocol/ssl/dtls-protocol.pac
-include/bro/analyzer/protocol/ssl/dtls.pac
-include/bro/analyzer/protocol/ssl/events.bif.h
-include/bro/analyzer/protocol/ssl/functions.bif.h
-include/bro/analyzer/protocol/ssl/proc-certificate.pac
-include/bro/analyzer/protocol/ssl/proc-client-hello.pac
-include/bro/analyzer/protocol/ssl/proc-server-hello.pac
-include/bro/analyzer/protocol/ssl/ssl-analyzer.pac
-include/bro/analyzer/protocol/ssl/ssl-defs.pac
-include/bro/analyzer/protocol/ssl/ssl-dtls-analyzer.pac
-include/bro/analyzer/protocol/ssl/ssl-dtls-protocol.pac
-include/bro/analyzer/protocol/ssl/ssl-protocol.pac
-include/bro/analyzer/protocol/ssl/ssl.pac
-include/bro/analyzer/protocol/ssl/tls-handshake-analyzer.pac
-include/bro/analyzer/protocol/ssl/tls-handshake-protocol.pac
-include/bro/analyzer/protocol/ssl/tls-handshake-signed_certificate_timestamp.pac
-include/bro/analyzer/protocol/ssl/tls-handshake.pac
-include/bro/analyzer/protocol/ssl/types.bif.h
-include/bro/analyzer/protocol/stepping-stone/SteppingStone.h
-include/bro/analyzer/protocol/stepping-stone/events.bif.h
-include/bro/analyzer/protocol/syslog/Syslog.h
-include/bro/analyzer/protocol/syslog/events.bif.h
-include/bro/analyzer/protocol/syslog/syslog-analyzer.pac
-include/bro/analyzer/protocol/syslog/syslog-protocol.pac
-include/bro/analyzer/protocol/syslog/syslog.pac
-include/bro/analyzer/protocol/tcp/ContentLine.h
-include/bro/analyzer/protocol/tcp/Stats.h
-include/bro/analyzer/protocol/tcp/TCP.h
-include/bro/analyzer/protocol/tcp/TCP_Endpoint.h
-include/bro/analyzer/protocol/tcp/TCP_Flags.h
-include/bro/analyzer/protocol/tcp/TCP_Reassembler.h
-include/bro/analyzer/protocol/tcp/events.bif.h
-include/bro/analyzer/protocol/tcp/functions.bif.h
-include/bro/analyzer/protocol/teredo/Teredo.h
-include/bro/analyzer/protocol/teredo/events.bif.h
-include/bro/analyzer/protocol/udp/UDP.h
-include/bro/analyzer/protocol/udp/events.bif.h
-include/bro/analyzer/protocol/xmpp/XMPP.h
-include/bro/analyzer/protocol/xmpp/events.bif.h
-include/bro/analyzer/protocol/xmpp/xmpp-analyzer.pac
-include/bro/analyzer/protocol/xmpp/xmpp-protocol.pac
-include/bro/analyzer/protocol/xmpp/xmpp.pac
-include/bro/analyzer/protocol/zip/ZIP.h
-include/bro/binpac-lib.pac
-include/bro/binpac.pac
-include/bro/binpac_bro-lib.pac
-include/bro/binpac_bro.h
-include/bro/bro-bif.h
-include/bro/bro-config.h
-include/bro/bro.bif.func_h
-include/bro/bro.bif.netvar_h
-include/bro/bro.pac
-include/bro/bro_inet_ntop.h
-include/bro/broker/Data.h
-include/bro/broker/Manager.h
-include/bro/broker/Store.h
-include/bro/broker/comm.bif.h
-include/bro/broker/data.bif.h
-include/bro/broker/messaging.bif.h
-include/bro/broker/store.bif.h
-include/bro/broxygen/Configuration.h
-include/bro/broxygen/IdentifierInfo.h
-include/bro/broxygen/Info.h
-include/bro/broxygen/Manager.h
-include/bro/broxygen/PackageInfo.h
-include/bro/broxygen/ReStructuredTextTable.h
-include/bro/broxygen/ScriptInfo.h
-include/bro/broxygen/Target.h
-include/bro/broxygen/broxygen.bif.h
-include/bro/broxygen/utils.h
-include/bro/bsd-getopt-long.h
-include/bro/const.bif.func_h
-include/bro/const.bif.netvar_h
-include/bro/cq.h
-include/bro/digest.h
-include/bro/event.bif.func_h
-include/bro/event.bif.netvar_h
-include/bro/file_analysis/Analyzer.h
-include/bro/file_analysis/AnalyzerSet.h
-include/bro/file_analysis/Component.h
-include/bro/file_analysis/File.h
-include/bro/file_analysis/FileReassembler.h
-include/bro/file_analysis/FileTimer.h
-include/bro/file_analysis/Manager.h
-include/bro/file_analysis/Tag.h
-include/bro/file_analysis/analyzer/data_event/DataEvent.h
-include/bro/file_analysis/analyzer/entropy/Entropy.h
-include/bro/file_analysis/analyzer/entropy/events.bif.h
-include/bro/file_analysis/analyzer/extract/Extract.h
-include/bro/file_analysis/analyzer/extract/events.bif.h
-include/bro/file_analysis/analyzer/extract/functions.bif.h
-include/bro/file_analysis/analyzer/hash/Hash.h
-include/bro/file_analysis/analyzer/hash/events.bif.h
-include/bro/file_analysis/analyzer/pe/PE.h
-include/bro/file_analysis/analyzer/pe/events.bif.h
-include/bro/file_analysis/analyzer/pe/pe-analyzer.pac
-include/bro/file_analysis/analyzer/pe/pe-file-headers.pac
-include/bro/file_analysis/analyzer/pe/pe-file-idata.pac
-include/bro/file_analysis/analyzer/pe/pe-file-types.pac
-include/bro/file_analysis/analyzer/pe/pe-file.pac
-include/bro/file_analysis/analyzer/pe/pe.pac
-include/bro/file_analysis/analyzer/unified2/Unified2.h
-include/bro/file_analysis/analyzer/unified2/events.bif.h
-include/bro/file_analysis/analyzer/unified2/types.bif.h
-include/bro/file_analysis/analyzer/unified2/unified2-analyzer.pac
-include/bro/file_analysis/analyzer/unified2/unified2-file.pac
-include/bro/file_analysis/analyzer/unified2/unified2.pac
-include/bro/file_analysis/analyzer/x509/OCSP.h
-include/bro/file_analysis/analyzer/x509/X509.h
-include/bro/file_analysis/analyzer/x509/X509Common.h
-include/bro/file_analysis/analyzer/x509/events.bif.h
-include/bro/file_analysis/analyzer/x509/functions.bif.h
-include/bro/file_analysis/analyzer/x509/ocsp_events.bif.h
-include/bro/file_analysis/analyzer/x509/types.bif.h
-include/bro/file_analysis/analyzer/x509/x509-extension.pac
-include/bro/file_analysis/analyzer/x509/x509-signed_certificate_timestamp.pac
-include/bro/file_analysis/file_analysis.bif.h
-include/bro/input.h
-include/bro/input/Component.h
-include/bro/input/Manager.h
-include/bro/input/ReaderBackend.h
-include/bro/input/ReaderFrontend.h
-include/bro/input/Tag.h
-include/bro/input/input.bif.h
-include/bro/input/readers/ascii/Ascii.h
-include/bro/input/readers/ascii/ascii.bif.h
-include/bro/input/readers/benchmark/Benchmark.h
-include/bro/input/readers/benchmark/benchmark.bif.h
-include/bro/input/readers/binary/Binary.h
-include/bro/input/readers/binary/binary.bif.h
-include/bro/input/readers/config/Config.h
-include/bro/input/readers/config/config.bif.h
-include/bro/input/readers/raw/Plugin.h
-include/bro/input/readers/raw/Raw.h
-include/bro/input/readers/raw/raw.bif.h
-include/bro/input/readers/sqlite/SQLite.h
-include/bro/input/readers/sqlite/sqlite.bif.h
-include/bro/iosource/BPF_Program.h
-include/bro/iosource/Component.h
-include/bro/iosource/FD_Set.h
-include/bro/iosource/IOSource.h
-include/bro/iosource/Manager.h
-include/bro/iosource/Packet.h
-include/bro/iosource/PktDumper.h
-include/bro/iosource/PktSrc.h
-include/bro/iosource/pcap/Dumper.h
-include/bro/iosource/pcap/Source.h
-include/bro/iosource/pcap/pcap.bif.h
-include/bro/logging/Component.h
-include/bro/logging/Manager.h
-include/bro/logging/Tag.h
-include/bro/logging/WriterBackend.h
-include/bro/logging/WriterFrontend.h
-include/bro/logging/logging.bif.h
-include/bro/logging/writers/ascii/Ascii.h
-include/bro/logging/writers/ascii/ascii.bif.h
-include/bro/logging/writers/none/None.h
-include/bro/logging/writers/none/none.bif.h
-include/bro/logging/writers/sqlite/SQLite.h
-include/bro/logging/writers/sqlite/sqlite.bif.h
-include/bro/modp_numtoa.h
-include/bro/module_util.h
-include/bro/nb_dns.h
-include/bro/net_util.h
-include/bro/option.bif.func_h
-include/bro/option.bif.netvar_h
-include/bro/patricia.h
-include/bro/plugin/Component.h
-include/bro/plugin/ComponentManager.h
-include/bro/plugin/Manager.h
-include/bro/plugin/Plugin.h
-include/bro/plugin/TaggedComponent.h
-include/bro/probabilistic/BitVector.h
-include/bro/probabilistic/BloomFilter.h
-include/bro/probabilistic/CardinalityCounter.h
-include/bro/probabilistic/CounterVector.h
-include/bro/probabilistic/Hasher.h
-include/bro/probabilistic/Topk.h
-include/bro/probabilistic/bloom-filter.bif.h
-include/bro/probabilistic/cardinality-counter.bif.h
-include/bro/probabilistic/top-k.bif.h
-include/bro/reporter.bif.func_h
-include/bro/reporter.bif.netvar_h
-include/bro/setsignal.h
-include/bro/siphash24.h
-include/bro/stats.bif.func_h
-include/bro/stats.bif.netvar_h
-include/bro/strings.bif.func_h
-include/bro/strings.bif.netvar_h
-include/bro/threading/BasicThread.h
-include/bro/threading/Formatter.h
-include/bro/threading/Manager.h
-include/bro/threading/MsgThread.h
-include/bro/threading/Queue.h
-include/bro/threading/SerialTypes.h
-include/bro/threading/formatters/Ascii.h
-include/bro/threading/formatters/JSON.h
-include/bro/types.bif.func_h
-include/bro/types.bif.netvar_h
-include/bro/util.h
%%BROKER%%include/broker/address.hh
%%BROKER%%include/broker/api_flags.hh
%%BROKER%%include/broker/atoms.hh
@@ -624,6 +84,7 @@
%%BROKER%%include/broker/internal_command.hh
%%BROKER%%include/broker/logger.hh
%%BROKER%%include/broker/mailbox.hh
+%%BROKER%%include/broker/message.hh
%%BROKER%%include/broker/network_info.hh
%%BROKER%%include/broker/none.hh
%%BROKER%%include/broker/optional.hh
@@ -644,6 +105,7 @@
%%BROKER%%include/broker/timeout.hh
%%BROKER%%include/broker/topic.hh
%%BROKER%%include/broker/version.hh
+%%BROKER%%include/broker/zeek.hh
%%BROKER%%include/caf/abstract_actor.hpp
%%BROKER%%include/caf/abstract_channel.hpp
%%BROKER%%include/caf/abstract_composable_behavior.hpp
@@ -689,6 +151,7 @@
%%BROKER%%include/caf/config_option_adder.hpp
%%BROKER%%include/caf/config_option_set.hpp
%%BROKER%%include/caf/config_value.hpp
+%%BROKER%%include/caf/cow_tuple.hpp
%%BROKER%%include/caf/data_processor.hpp
%%BROKER%%include/caf/decorator/sequencer.hpp
%%BROKER%%include/caf/decorator/splitter.hpp
@@ -738,6 +201,7 @@
%%BROKER%%include/caf/detail/is_one_of.hpp
%%BROKER%%include/caf/detail/is_primitive_config_value.hpp
%%BROKER%%include/caf/detail/limited_vector.hpp
+%%BROKER%%include/caf/detail/log_level.hpp
%%BROKER%%include/caf/detail/mask_bits.hpp
%%BROKER%%include/caf/detail/merged_tuple.hpp
%%BROKER%%include/caf/detail/message_data.hpp
@@ -770,6 +234,7 @@
%%BROKER%%include/caf/detail/private_thread.hpp
%%BROKER%%include/caf/detail/pseudo_tuple.hpp
%%BROKER%%include/caf/detail/raw_access.hpp
+%%BROKER%%include/caf/detail/ringbuffer.hpp
%%BROKER%%include/caf/detail/ripemd_160.hpp
%%BROKER%%include/caf/detail/safe_equal.hpp
%%BROKER%%include/caf/detail/scope_guard.hpp
@@ -780,6 +245,7 @@
%%BROKER%%include/caf/detail/simple_actor_clock.hpp
%%BROKER%%include/caf/detail/socket_guard.hpp
%%BROKER%%include/caf/detail/spawn_fwd.hpp
+%%BROKER%%include/caf/detail/spawnable.hpp
%%BROKER%%include/caf/detail/split_join.hpp
%%BROKER%%include/caf/detail/squashed_int.hpp
%%BROKER%%include/caf/detail/stream_distribution_tree.hpp
@@ -921,6 +387,7 @@
%%BROKER%%include/caf/ipv4_subnet.hpp
%%BROKER%%include/caf/ipv6_address.hpp
%%BROKER%%include/caf/ipv6_subnet.hpp
+%%BROKER%%include/caf/is_actor_handle.hpp
%%BROKER%%include/caf/is_message_sink.hpp
%%BROKER%%include/caf/is_timeout_or_catch_all.hpp
%%BROKER%%include/caf/is_typed_actor.hpp
@@ -983,7 +450,6 @@
%%BROKER%%include/caf/policy/categorized.hpp
%%BROKER%%include/caf/policy/downstream_messages.hpp
%%BROKER%%include/caf/policy/normal_messages.hpp
-%%BROKER%%include/caf/policy/priority_aware.hpp
%%BROKER%%include/caf/policy/profiled.hpp
%%BROKER%%include/caf/policy/scheduler_policy.hpp
%%BROKER%%include/caf/policy/tcp.hpp
@@ -1075,261 +541,844 @@
%%BROKER%%include/caf/uri_builder.hpp
%%BROKER%%include/caf/variant.hpp
%%BROKER%%include/caf/weak_intrusive_ptr.hpp
-%%NETMAP%%lib/bro/plugins/Bro_Netmap/COPYING
-%%NETMAP%%lib/bro/plugins/Bro_Netmap/__bro_plugin__
-%%NETMAP%%lib/bro/plugins/Bro_Netmap/broctl/netmap.py
-%%NETMAP%%lib/bro/plugins/Bro_Netmap/lib/Bro-Netmap.%%LCASE_OPSYS%%-%%ARCH%%.so
-%%NETMAP%%lib/bro/plugins/Bro_Netmap/scripts/__load__.bro
-%%NETMAP%%lib/bro/plugins/Bro_Netmap/scripts/init.bro
-%%BROCTL%%lib/broctl/BroControl/__init__.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/__init__.pyc
-%%BROCTL%%lib/broctl/BroControl/brocmd.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/brocmd.pyc
-%%BROCTL%%lib/broctl/BroControl/broctl.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/broctl.pyc
-%%BROCTL%%lib/broctl/BroControl/cmdresult.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/cmdresult.pyc
-%%BROCTL%%lib/broctl/BroControl/config.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/config.pyc
-%%BROCTL%%lib/broctl/BroControl/control.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/control.pyc
-%%BROCTL%%lib/broctl/BroControl/cron.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/cron.pyc
-%%BROCTL%%lib/broctl/BroControl/doc.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/doc.pyc
-%%BROCTL%%lib/broctl/BroControl/events.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/events.pyc
-%%BROCTL%%lib/broctl/BroControl/exceptions.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/exceptions.pyc
-%%BROCTL%%lib/broctl/BroControl/execute.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/execute.pyc
-%%BROCTL%%lib/broctl/BroControl/install.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/install.pyc
-%%BROCTL%%lib/broctl/BroControl/lock.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/lock.pyc
-%%BROCTL%%lib/broctl/BroControl/node.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/node.pyc
-%%BROCTL%%lib/broctl/BroControl/options.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/options.pyc
-%%BROCTL%%lib/broctl/BroControl/plugin.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/plugin.pyc
-%%BROCTL%%lib/broctl/BroControl/pluginreg.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/pluginreg.pyc
-%%BROCTL%%lib/broctl/BroControl/printdoc.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/printdoc.pyc
-%%BROCTL%%lib/broctl/BroControl/py3bro.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/py3bro.pyc
-%%BROCTL%%lib/broctl/BroControl/ssh_runner.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/ssh_runner.pyc
-%%BROCTL%%lib/broctl/BroControl/state.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/state.pyc
-%%BROCTL%%lib/broctl/BroControl/util.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/util.pyc
-%%BROCTL%%lib/broctl/BroControl/utilcurses.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/utilcurses.pyc
-%%BROCTL%%lib/broctl/BroControl/version.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/version.pyc
-%%BROCTL%%lib/broctl/SubnetTree.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/SubnetTree.pyc
-%%BROCTL%%lib/broctl/_SubnetTree.so
-%%BROCTL%%lib/broctl/broker/__init__.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/broker/__init__.pyc
-%%BROCTL%%lib/broctl/broker/_broker.so
-%%BROCTL%%lib/broctl/broker/bro.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/broker/bro.pyc
-%%BROCTL%%lib/broctl/plugins/TestPlugin.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/TestPlugin.pyc
-%%BROCTL%%lib/broctl/plugins/lb_custom.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_custom.pyc
-%%BROCTL%%lib/broctl/plugins/lb_myricom.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_myricom.pyc
-%%BROCTL%%lib/broctl/plugins/lb_pf_ring.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_pf_ring.pyc
-%%BROCTL%%lib/broctl/plugins/ps.py
-%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/ps.pyc
-lib/libbinpac.a
+include/paraglob.h
+include/zeek/3rdparty/fifo_map.hpp
+include/zeek/3rdparty/json.hpp
+include/zeek/3rdparty/sqlite3.h
+include/zeek/Anon.h
+include/zeek/Attr.h
+include/zeek/Base64.h
+include/zeek/BroList.h
+include/zeek/BroString.h
+include/zeek/Brofiler.h
+include/zeek/CCL.h
+include/zeek/CompHash.h
+include/zeek/Conn.h
+include/zeek/Continuation.h
+include/zeek/ConvertUTF.h
+include/zeek/DFA.h
+include/zeek/DNS_Mgr.h
+include/zeek/DbgBreakpoint.h
+include/zeek/DbgDisplay.h
+include/zeek/DbgWatch.h
+include/zeek/Debug.h
+include/zeek/DebugCmdInfoConstants.h
+include/zeek/DebugCmds.h
+include/zeek/DebugLogger.h
+include/zeek/Desc.h
+include/zeek/Dict.h
+include/zeek/Discard.h
+include/zeek/EquivClass.h
+include/zeek/Event.h
+include/zeek/EventHandler.h
+include/zeek/EventLauncher.h
+include/zeek/EventRegistry.h
+include/zeek/Expr.h
+include/zeek/File.h
+include/zeek/Flare.h
+include/zeek/Frag.h
+include/zeek/Frame.h
+include/zeek/Func.h
+include/zeek/Hash.h
+include/zeek/ID.h
+include/zeek/IP.h
+include/zeek/IPAddr.h
+include/zeek/IntSet.h
+include/zeek/List.h
+include/zeek/NFA.h
+include/zeek/Net.h
+include/zeek/NetVar.h
+include/zeek/Notifier.h
+include/zeek/Obj.h
+include/zeek/OpaqueVal.h
+include/zeek/PacketDumper.h
+include/zeek/PacketFilter.h
+include/zeek/Pipe.h
+include/zeek/PolicyFile.h
+include/zeek/PrefixTable.h
+include/zeek/PriorityQueue.h
+include/zeek/Queue.h
+include/zeek/RE.h
+include/zeek/RandTest.h
+include/zeek/Reassem.h
+include/zeek/Reporter.h
+include/zeek/Rule.h
+include/zeek/RuleAction.h
+include/zeek/RuleCondition.h
+include/zeek/RuleMatcher.h
+include/zeek/Scope.h
+include/zeek/SerializationFormat.h
+include/zeek/Sessions.h
+include/zeek/SmithWaterman.h
+include/zeek/Stats.h
+include/zeek/Stmt.h
+include/zeek/StmtEnums.h
+include/zeek/Tag.h
+include/zeek/Timer.h
+include/zeek/Traverse.h
+include/zeek/TraverseTypes.h
+include/zeek/Trigger.h
+include/zeek/TunnelEncapsulation.h
+include/zeek/Type.h
+include/zeek/UID.h
+include/zeek/Val.h
+include/zeek/Var.h
+include/zeek/WeirdState.h
+include/zeek/analyzer/Analyzer.h
+include/zeek/analyzer/Component.h
+include/zeek/analyzer/Manager.h
+include/zeek/analyzer/Tag.h
+include/zeek/analyzer/analyzer.bif.h
+include/zeek/analyzer/protocol/arp/ARP.h
+include/zeek/analyzer/protocol/arp/events.bif.h
+include/zeek/analyzer/protocol/asn1/asn1.pac
+include/zeek/analyzer/protocol/ayiya/AYIYA.h
+include/zeek/analyzer/protocol/ayiya/ayiya-analyzer.pac
+include/zeek/analyzer/protocol/ayiya/ayiya-protocol.pac
+include/zeek/analyzer/protocol/ayiya/ayiya.pac
+include/zeek/analyzer/protocol/bittorrent/BitTorrent.h
+include/zeek/analyzer/protocol/bittorrent/BitTorrentTracker.h
+include/zeek/analyzer/protocol/bittorrent/bittorrent-analyzer.pac
+include/zeek/analyzer/protocol/bittorrent/bittorrent-protocol.pac
+include/zeek/analyzer/protocol/bittorrent/bittorrent.pac
+include/zeek/analyzer/protocol/bittorrent/events.bif.h
+include/zeek/analyzer/protocol/conn-size/ConnSize.h
+include/zeek/analyzer/protocol/conn-size/events.bif.h
+include/zeek/analyzer/protocol/conn-size/functions.bif.h
+include/zeek/analyzer/protocol/dce-rpc/DCE_RPC.h
+include/zeek/analyzer/protocol/dce-rpc/consts.bif.h
+include/zeek/analyzer/protocol/dce-rpc/dce_rpc-analyzer.pac
+include/zeek/analyzer/protocol/dce-rpc/dce_rpc-auth.pac
+include/zeek/analyzer/protocol/dce-rpc/dce_rpc-protocol.pac
+include/zeek/analyzer/protocol/dce-rpc/dce_rpc.pac
+include/zeek/analyzer/protocol/dce-rpc/endpoint-atsvc.pac
+include/zeek/analyzer/protocol/dce-rpc/endpoint-epmapper.pac
+include/zeek/analyzer/protocol/dce-rpc/events.bif.h
+include/zeek/analyzer/protocol/dce-rpc/types.bif.h
+include/zeek/analyzer/protocol/dhcp/DHCP.h
+include/zeek/analyzer/protocol/dhcp/dhcp-analyzer.pac
+include/zeek/analyzer/protocol/dhcp/dhcp-options.pac
+include/zeek/analyzer/protocol/dhcp/dhcp-protocol.pac
+include/zeek/analyzer/protocol/dhcp/dhcp.pac
+include/zeek/analyzer/protocol/dhcp/events.bif.h
+include/zeek/analyzer/protocol/dhcp/types.bif.h
+include/zeek/analyzer/protocol/dnp3/DNP3.h
+include/zeek/analyzer/protocol/dnp3/dnp3-analyzer.pac
+include/zeek/analyzer/protocol/dnp3/dnp3-objects.pac
+include/zeek/analyzer/protocol/dnp3/dnp3-protocol.pac
+include/zeek/analyzer/protocol/dnp3/dnp3.pac
+include/zeek/analyzer/protocol/dnp3/events.bif.h
+include/zeek/analyzer/protocol/dns/DNS.h
+include/zeek/analyzer/protocol/dns/events.bif.h
+include/zeek/analyzer/protocol/file/File.h
+include/zeek/analyzer/protocol/file/events.bif.h
+include/zeek/analyzer/protocol/finger/Finger.h
+include/zeek/analyzer/protocol/finger/events.bif.h
+include/zeek/analyzer/protocol/ftp/FTP.h
+include/zeek/analyzer/protocol/ftp/events.bif.h
+include/zeek/analyzer/protocol/ftp/functions.bif.h
+include/zeek/analyzer/protocol/gnutella/Gnutella.h
+include/zeek/analyzer/protocol/gnutella/events.bif.h
+include/zeek/analyzer/protocol/gssapi/GSSAPI.h
+include/zeek/analyzer/protocol/gssapi/events.bif.h
+include/zeek/analyzer/protocol/gssapi/gssapi-analyzer.pac
+include/zeek/analyzer/protocol/gssapi/gssapi-protocol.pac
+include/zeek/analyzer/protocol/gssapi/gssapi.pac
+include/zeek/analyzer/protocol/gtpv1/GTPv1.h
+include/zeek/analyzer/protocol/gtpv1/events.bif.h
+include/zeek/analyzer/protocol/gtpv1/gtpv1-analyzer.pac
+include/zeek/analyzer/protocol/gtpv1/gtpv1-protocol.pac
+include/zeek/analyzer/protocol/gtpv1/gtpv1.pac
+include/zeek/analyzer/protocol/http/HTTP.h
+include/zeek/analyzer/protocol/http/events.bif.h
+include/zeek/analyzer/protocol/http/functions.bif.h
+include/zeek/analyzer/protocol/icmp/ICMP.h
+include/zeek/analyzer/protocol/icmp/events.bif.h
+include/zeek/analyzer/protocol/ident/Ident.h
+include/zeek/analyzer/protocol/ident/events.bif.h
+include/zeek/analyzer/protocol/imap/IMAP.h
+include/zeek/analyzer/protocol/imap/events.bif.h
+include/zeek/analyzer/protocol/imap/imap-analyzer.pac
+include/zeek/analyzer/protocol/imap/imap-protocol.pac
+include/zeek/analyzer/protocol/imap/imap.pac
+include/zeek/analyzer/protocol/irc/IRC.h
+include/zeek/analyzer/protocol/irc/events.bif.h
+include/zeek/analyzer/protocol/krb/KRB.h
+include/zeek/analyzer/protocol/krb/KRB_TCP.h
+include/zeek/analyzer/protocol/krb/events.bif.h
+include/zeek/analyzer/protocol/krb/krb-analyzer.pac
+include/zeek/analyzer/protocol/krb/krb-asn1.pac
+include/zeek/analyzer/protocol/krb/krb-defs.pac
+include/zeek/analyzer/protocol/krb/krb-padata.pac
+include/zeek/analyzer/protocol/krb/krb-protocol.pac
+include/zeek/analyzer/protocol/krb/krb-types.pac
+include/zeek/analyzer/protocol/krb/krb.pac
+include/zeek/analyzer/protocol/krb/krb_TCP.pac
+include/zeek/analyzer/protocol/krb/types.bif.h
+include/zeek/analyzer/protocol/login/Login.h
+include/zeek/analyzer/protocol/login/NVT.h
+include/zeek/analyzer/protocol/login/RSH.h
+include/zeek/analyzer/protocol/login/Rlogin.h
+include/zeek/analyzer/protocol/login/Telnet.h
+include/zeek/analyzer/protocol/login/events.bif.h
+include/zeek/analyzer/protocol/login/functions.bif.h
+include/zeek/analyzer/protocol/mime/MIME.h
+include/zeek/analyzer/protocol/mime/events.bif.h
+include/zeek/analyzer/protocol/modbus/Modbus.h
+include/zeek/analyzer/protocol/modbus/events.bif.h
+include/zeek/analyzer/protocol/modbus/modbus-analyzer.pac
+include/zeek/analyzer/protocol/modbus/modbus-protocol.pac
+include/zeek/analyzer/protocol/modbus/modbus.pac
+include/zeek/analyzer/protocol/mqtt/MQTT.h
+include/zeek/analyzer/protocol/mqtt/commands/connack.pac
+include/zeek/analyzer/protocol/mqtt/commands/connect.pac
+include/zeek/analyzer/protocol/mqtt/commands/disconnect.pac
+include/zeek/analyzer/protocol/mqtt/commands/pingreq.pac
+include/zeek/analyzer/protocol/mqtt/commands/pingresp.pac
+include/zeek/analyzer/protocol/mqtt/commands/puback.pac
+include/zeek/analyzer/protocol/mqtt/commands/pubcomp.pac
+include/zeek/analyzer/protocol/mqtt/commands/publish.pac
+include/zeek/analyzer/protocol/mqtt/commands/pubrec.pac
+include/zeek/analyzer/protocol/mqtt/commands/pubrel.pac
+include/zeek/analyzer/protocol/mqtt/commands/suback.pac
+include/zeek/analyzer/protocol/mqtt/commands/subscribe.pac
+include/zeek/analyzer/protocol/mqtt/commands/unsuback.pac
+include/zeek/analyzer/protocol/mqtt/commands/unsubscribe.pac
+include/zeek/analyzer/protocol/mqtt/events.bif.h
+include/zeek/analyzer/protocol/mqtt/mqtt-protocol.pac
+include/zeek/analyzer/protocol/mqtt/mqtt.pac
+include/zeek/analyzer/protocol/mqtt/types.bif.h
+include/zeek/analyzer/protocol/mysql/MySQL.h
+include/zeek/analyzer/protocol/mysql/events.bif.h
+include/zeek/analyzer/protocol/mysql/mysql-analyzer.pac
+include/zeek/analyzer/protocol/mysql/mysql-protocol.pac
+include/zeek/analyzer/protocol/mysql/mysql.pac
+include/zeek/analyzer/protocol/ncp/NCP.h
+include/zeek/analyzer/protocol/ncp/consts.bif.h
+include/zeek/analyzer/protocol/ncp/events.bif.h
+include/zeek/analyzer/protocol/ncp/ncp.pac
+include/zeek/analyzer/protocol/netbios/NetbiosSSN.h
+include/zeek/analyzer/protocol/netbios/events.bif.h
+include/zeek/analyzer/protocol/netbios/functions.bif.h
+include/zeek/analyzer/protocol/ntlm/NTLM.h
+include/zeek/analyzer/protocol/ntlm/events.bif.h
+include/zeek/analyzer/protocol/ntlm/ntlm-analyzer.pac
+include/zeek/analyzer/protocol/ntlm/ntlm-protocol.pac
+include/zeek/analyzer/protocol/ntlm/ntlm.pac
+include/zeek/analyzer/protocol/ntlm/types.bif.h
+include/zeek/analyzer/protocol/ntp/NTP.h
+include/zeek/analyzer/protocol/ntp/events.bif.h
+include/zeek/analyzer/protocol/ntp/ntp-analyzer.pac
+include/zeek/analyzer/protocol/ntp/ntp-mode7.pac
+include/zeek/analyzer/protocol/ntp/ntp-protocol.pac
+include/zeek/analyzer/protocol/ntp/ntp.pac
+include/zeek/analyzer/protocol/ntp/types.bif.h
+include/zeek/analyzer/protocol/pia/PIA.h
+include/zeek/analyzer/protocol/pop3/POP3.h
+include/zeek/analyzer/protocol/pop3/events.bif.h
+include/zeek/analyzer/protocol/radius/RADIUS.h
+include/zeek/analyzer/protocol/radius/events.bif.h
+include/zeek/analyzer/protocol/radius/radius-analyzer.pac
+include/zeek/analyzer/protocol/radius/radius-protocol.pac
+include/zeek/analyzer/protocol/radius/radius.pac
+include/zeek/analyzer/protocol/rdp/RDP.h
+include/zeek/analyzer/protocol/rdp/events.bif.h
+include/zeek/analyzer/protocol/rdp/rdp-analyzer.pac
+include/zeek/analyzer/protocol/rdp/rdp-protocol.pac
+include/zeek/analyzer/protocol/rdp/rdp.pac
+include/zeek/analyzer/protocol/rdp/types.bif.h
+include/zeek/analyzer/protocol/rfb/RFB.h
+include/zeek/analyzer/protocol/rfb/events.bif.h
+include/zeek/analyzer/protocol/rfb/rfb-analyzer.pac
+include/zeek/analyzer/protocol/rfb/rfb-protocol.pac
+include/zeek/analyzer/protocol/rfb/rfb.pac
+include/zeek/analyzer/protocol/rpc/MOUNT.h
+include/zeek/analyzer/protocol/rpc/NFS.h
+include/zeek/analyzer/protocol/rpc/Portmap.h
+include/zeek/analyzer/protocol/rpc/RPC.h
+include/zeek/analyzer/protocol/rpc/XDR.h
+include/zeek/analyzer/protocol/rpc/events.bif.h
+include/zeek/analyzer/protocol/sip/SIP.h
+include/zeek/analyzer/protocol/sip/SIP_TCP.h
+include/zeek/analyzer/protocol/sip/events.bif.h
+include/zeek/analyzer/protocol/sip/sip-analyzer.pac
+include/zeek/analyzer/protocol/sip/sip-protocol.pac
+include/zeek/analyzer/protocol/sip/sip.pac
+include/zeek/analyzer/protocol/sip/sip_TCP.pac
+include/zeek/analyzer/protocol/smb/SMB.h
+include/zeek/analyzer/protocol/smb/consts.bif.h
+include/zeek/analyzer/protocol/smb/events.bif.h
+include/zeek/analyzer/protocol/smb/smb-common.pac
+include/zeek/analyzer/protocol/smb/smb-gssapi.pac
+include/zeek/analyzer/protocol/smb/smb-mailslot.pac
+include/zeek/analyzer/protocol/smb/smb-pipe.pac
+include/zeek/analyzer/protocol/smb/smb-strings.pac
+include/zeek/analyzer/protocol/smb/smb-time.pac
+include/zeek/analyzer/protocol/smb/smb.pac
+include/zeek/analyzer/protocol/smb/smb1-com-check-directory.pac
+include/zeek/analyzer/protocol/smb/smb1-com-close.pac
+include/zeek/analyzer/protocol/smb/smb1-com-create-directory.pac
+include/zeek/analyzer/protocol/smb/smb1-com-echo.pac
+include/zeek/analyzer/protocol/smb/smb1-com-locking-andx.pac
+include/zeek/analyzer/protocol/smb/smb1-com-logoff-andx.pac
+include/zeek/analyzer/protocol/smb/smb1-com-negotiate.pac
+include/zeek/analyzer/protocol/smb/smb1-com-nt-cancel.pac
+include/zeek/analyzer/protocol/smb/smb1-com-nt-create-andx.pac
+include/zeek/analyzer/protocol/smb/smb1-com-nt-transact.pac
+include/zeek/analyzer/protocol/smb/smb1-com-query-information.pac
+include/zeek/analyzer/protocol/smb/smb1-com-read-andx.pac
+include/zeek/analyzer/protocol/smb/smb1-com-session-setup-andx.pac
+include/zeek/analyzer/protocol/smb/smb1-com-transaction-secondary.pac
+include/zeek/analyzer/protocol/smb/smb1-com-transaction.pac
+include/zeek/analyzer/protocol/smb/smb1-com-transaction2-secondary.pac
+include/zeek/analyzer/protocol/smb/smb1-com-transaction2.pac
+include/zeek/analyzer/protocol/smb/smb1-com-tree-connect-andx.pac
+include/zeek/analyzer/protocol/smb/smb1-com-tree-disconnect.pac
+include/zeek/analyzer/protocol/smb/smb1-com-write-andx.pac
+include/zeek/analyzer/protocol/smb/smb1-protocol.pac
+include/zeek/analyzer/protocol/smb/smb1_com_check_directory.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_close.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_create_directory.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_echo.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_logoff_andx.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_negotiate.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_nt_cancel.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_nt_create_andx.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_query_information.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_read_andx.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_session_setup_andx.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_transaction.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_transaction2.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_transaction2_secondary.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_transaction_secondary.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_tree_connect_andx.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_tree_disconnect.bif.h
+include/zeek/analyzer/protocol/smb/smb1_com_write_andx.bif.h
+include/zeek/analyzer/protocol/smb/smb1_events.bif.h
+include/zeek/analyzer/protocol/smb/smb2-com-close.pac
+include/zeek/analyzer/protocol/smb/smb2-com-create.pac
+include/zeek/analyzer/protocol/smb/smb2-com-ioctl.pac
+include/zeek/analyzer/protocol/smb/smb2-com-lock.pac
+include/zeek/analyzer/protocol/smb/smb2-com-negotiate.pac
+include/zeek/analyzer/protocol/smb/smb2-com-read.pac
+include/zeek/analyzer/protocol/smb/smb2-com-session-setup.pac
+include/zeek/analyzer/protocol/smb/smb2-com-set-info.pac
+include/zeek/analyzer/protocol/smb/smb2-com-transform-header.pac
+include/zeek/analyzer/protocol/smb/smb2-com-tree-connect.pac
+include/zeek/analyzer/protocol/smb/smb2-com-tree-disconnect.pac
+include/zeek/analyzer/protocol/smb/smb2-com-write.pac
+include/zeek/analyzer/protocol/smb/smb2-protocol.pac
+include/zeek/analyzer/protocol/smb/smb2_com_close.bif.h
+include/zeek/analyzer/protocol/smb/smb2_com_create.bif.h
+include/zeek/analyzer/protocol/smb/smb2_com_negotiate.bif.h
+include/zeek/analyzer/protocol/smb/smb2_com_read.bif.h
+include/zeek/analyzer/protocol/smb/smb2_com_session_setup.bif.h
+include/zeek/analyzer/protocol/smb/smb2_com_set_info.bif.h
+include/zeek/analyzer/protocol/smb/smb2_com_transform_header.bif.h
+include/zeek/analyzer/protocol/smb/smb2_com_tree_connect.bif.h
+include/zeek/analyzer/protocol/smb/smb2_com_tree_disconnect.bif.h
+include/zeek/analyzer/protocol/smb/smb2_com_write.bif.h
+include/zeek/analyzer/protocol/smb/smb2_events.bif.h
+include/zeek/analyzer/protocol/smb/types.bif.h
+include/zeek/analyzer/protocol/smtp/SMTP.h
+include/zeek/analyzer/protocol/smtp/events.bif.h
+include/zeek/analyzer/protocol/smtp/functions.bif.h
+include/zeek/analyzer/protocol/snmp/SNMP.h
+include/zeek/analyzer/protocol/snmp/events.bif.h
+include/zeek/analyzer/protocol/snmp/snmp-analyzer.pac
+include/zeek/analyzer/protocol/snmp/snmp-protocol.pac
+include/zeek/analyzer/protocol/snmp/snmp.pac
+include/zeek/analyzer/protocol/snmp/types.bif.h
+include/zeek/analyzer/protocol/socks/SOCKS.h
+include/zeek/analyzer/protocol/socks/events.bif.h
+include/zeek/analyzer/protocol/socks/socks-analyzer.pac
+include/zeek/analyzer/protocol/socks/socks-protocol.pac
+include/zeek/analyzer/protocol/socks/socks.pac
+include/zeek/analyzer/protocol/ssh/SSH.h
+include/zeek/analyzer/protocol/ssh/consts.pac
+include/zeek/analyzer/protocol/ssh/events.bif.h
+include/zeek/analyzer/protocol/ssh/ssh-analyzer.pac
+include/zeek/analyzer/protocol/ssh/ssh-protocol.pac
+include/zeek/analyzer/protocol/ssh/ssh.pac
+include/zeek/analyzer/protocol/ssh/types.bif.h
+include/zeek/analyzer/protocol/ssl/DTLS.h
+include/zeek/analyzer/protocol/ssl/SSL.h
+include/zeek/analyzer/protocol/ssl/consts.bif.h
+include/zeek/analyzer/protocol/ssl/dtls-analyzer.pac
+include/zeek/analyzer/protocol/ssl/dtls-protocol.pac
+include/zeek/analyzer/protocol/ssl/dtls.pac
+include/zeek/analyzer/protocol/ssl/events.bif.h
+include/zeek/analyzer/protocol/ssl/functions.bif.h
+include/zeek/analyzer/protocol/ssl/proc-certificate.pac
+include/zeek/analyzer/protocol/ssl/proc-client-hello.pac
+include/zeek/analyzer/protocol/ssl/proc-server-hello.pac
+include/zeek/analyzer/protocol/ssl/ssl-analyzer.pac
+include/zeek/analyzer/protocol/ssl/ssl-defs.pac
+include/zeek/analyzer/protocol/ssl/ssl-dtls-analyzer.pac
+include/zeek/analyzer/protocol/ssl/ssl-dtls-protocol.pac
+include/zeek/analyzer/protocol/ssl/ssl-protocol.pac
+include/zeek/analyzer/protocol/ssl/ssl.pac
+include/zeek/analyzer/protocol/ssl/tls-handshake-analyzer.pac
+include/zeek/analyzer/protocol/ssl/tls-handshake-protocol.pac
+include/zeek/analyzer/protocol/ssl/tls-handshake-signed_certificate_timestamp.pac
+include/zeek/analyzer/protocol/ssl/tls-handshake.pac
+include/zeek/analyzer/protocol/ssl/types.bif.h
+include/zeek/analyzer/protocol/stepping-stone/SteppingStone.h
+include/zeek/analyzer/protocol/stepping-stone/events.bif.h
+include/zeek/analyzer/protocol/syslog/Syslog.h
+include/zeek/analyzer/protocol/syslog/events.bif.h
+include/zeek/analyzer/protocol/syslog/syslog-analyzer.pac
+include/zeek/analyzer/protocol/syslog/syslog-protocol.pac
+include/zeek/analyzer/protocol/syslog/syslog.pac
+include/zeek/analyzer/protocol/tcp/ContentLine.h
+include/zeek/analyzer/protocol/tcp/Stats.h
+include/zeek/analyzer/protocol/tcp/TCP.h
+include/zeek/analyzer/protocol/tcp/TCP_Endpoint.h
+include/zeek/analyzer/protocol/tcp/TCP_Flags.h
+include/zeek/analyzer/protocol/tcp/TCP_Reassembler.h
+include/zeek/analyzer/protocol/tcp/events.bif.h
+include/zeek/analyzer/protocol/tcp/functions.bif.h
+include/zeek/analyzer/protocol/teredo/Teredo.h
+include/zeek/analyzer/protocol/teredo/events.bif.h
+include/zeek/analyzer/protocol/udp/UDP.h
+include/zeek/analyzer/protocol/udp/events.bif.h
+include/zeek/analyzer/protocol/vxlan/VXLAN.h
+include/zeek/analyzer/protocol/vxlan/events.bif.h
+include/zeek/analyzer/protocol/xmpp/XMPP.h
+include/zeek/analyzer/protocol/xmpp/events.bif.h
+include/zeek/analyzer/protocol/xmpp/xmpp-analyzer.pac
+include/zeek/analyzer/protocol/xmpp/xmpp-protocol.pac
+include/zeek/analyzer/protocol/xmpp/xmpp.pac
+include/zeek/analyzer/protocol/zip/ZIP.h
+include/zeek/binpac-lib.pac
+include/zeek/binpac.pac
+include/zeek/binpac_bro-lib.pac
+include/zeek/binpac_bro.h
+include/zeek/bro-bif.h
+include/zeek/bro-config.h
+include/zeek/bro.pac
+include/zeek/bro_inet_ntop.h
+include/zeek/broker/Data.h
+include/zeek/broker/Manager.h
+include/zeek/broker/Store.h
+include/zeek/broker/comm.bif.h
+include/zeek/broker/data.bif.h
+include/zeek/broker/messaging.bif.h
+include/zeek/broker/store.bif.h
+include/zeek/bsd-getopt-long.h
+include/zeek/const.bif.func_h
+include/zeek/const.bif.netvar_h
+include/zeek/cq.h
+include/zeek/digest.h
+include/zeek/event.bif.func_h
+include/zeek/event.bif.netvar_h
+include/zeek/file_analysis/Analyzer.h
+include/zeek/file_analysis/AnalyzerSet.h
+include/zeek/file_analysis/Component.h
+include/zeek/file_analysis/File.h
+include/zeek/file_analysis/FileReassembler.h
+include/zeek/file_analysis/FileTimer.h
+include/zeek/file_analysis/Manager.h
+include/zeek/file_analysis/Tag.h
+include/zeek/file_analysis/analyzer/data_event/DataEvent.h
+include/zeek/file_analysis/analyzer/entropy/Entropy.h
+include/zeek/file_analysis/analyzer/entropy/events.bif.h
+include/zeek/file_analysis/analyzer/extract/Extract.h
+include/zeek/file_analysis/analyzer/extract/events.bif.h
+include/zeek/file_analysis/analyzer/extract/functions.bif.h
+include/zeek/file_analysis/analyzer/hash/Hash.h
+include/zeek/file_analysis/analyzer/hash/events.bif.h
+include/zeek/file_analysis/analyzer/pe/PE.h
+include/zeek/file_analysis/analyzer/pe/events.bif.h
+include/zeek/file_analysis/analyzer/pe/pe-analyzer.pac
+include/zeek/file_analysis/analyzer/pe/pe-file-headers.pac
+include/zeek/file_analysis/analyzer/pe/pe-file-idata.pac
+include/zeek/file_analysis/analyzer/pe/pe-file-types.pac
+include/zeek/file_analysis/analyzer/pe/pe-file.pac
+include/zeek/file_analysis/analyzer/pe/pe.pac
+include/zeek/file_analysis/analyzer/unified2/Unified2.h
+include/zeek/file_analysis/analyzer/unified2/events.bif.h
+include/zeek/file_analysis/analyzer/unified2/types.bif.h
+include/zeek/file_analysis/analyzer/unified2/unified2-analyzer.pac
+include/zeek/file_analysis/analyzer/unified2/unified2-file.pac
+include/zeek/file_analysis/analyzer/unified2/unified2.pac
+include/zeek/file_analysis/analyzer/x509/OCSP.h
+include/zeek/file_analysis/analyzer/x509/X509.h
+include/zeek/file_analysis/analyzer/x509/X509Common.h
+include/zeek/file_analysis/analyzer/x509/events.bif.h
+include/zeek/file_analysis/analyzer/x509/functions.bif.h
+include/zeek/file_analysis/analyzer/x509/ocsp_events.bif.h
+include/zeek/file_analysis/analyzer/x509/types.bif.h
+include/zeek/file_analysis/analyzer/x509/x509-extension.pac
+include/zeek/file_analysis/analyzer/x509/x509-signed_certificate_timestamp.pac
+include/zeek/file_analysis/file_analysis.bif.h
+include/zeek/input.h
+include/zeek/input/Component.h
+include/zeek/input/Manager.h
+include/zeek/input/ReaderBackend.h
+include/zeek/input/ReaderFrontend.h
+include/zeek/input/Tag.h
+include/zeek/input/input.bif.h
+include/zeek/input/readers/ascii/Ascii.h
+include/zeek/input/readers/ascii/ascii.bif.h
+include/zeek/input/readers/benchmark/Benchmark.h
+include/zeek/input/readers/benchmark/benchmark.bif.h
+include/zeek/input/readers/binary/Binary.h
+include/zeek/input/readers/binary/binary.bif.h
+include/zeek/input/readers/config/Config.h
+include/zeek/input/readers/config/config.bif.h
+include/zeek/input/readers/raw/Plugin.h
+include/zeek/input/readers/raw/Raw.h
+include/zeek/input/readers/raw/raw.bif.h
+include/zeek/input/readers/sqlite/SQLite.h
+include/zeek/input/readers/sqlite/sqlite.bif.h
+include/zeek/iosource/BPF_Program.h
+include/zeek/iosource/Component.h
+include/zeek/iosource/FD_Set.h
+include/zeek/iosource/IOSource.h
+include/zeek/iosource/Manager.h
+include/zeek/iosource/Packet.h
+include/zeek/iosource/PktDumper.h
+include/zeek/iosource/PktSrc.h
+include/zeek/iosource/pcap/Dumper.h
+include/zeek/iosource/pcap/Source.h
+include/zeek/iosource/pcap/pcap.bif.h
+include/zeek/logging/Component.h
+include/zeek/logging/Manager.h
+include/zeek/logging/Tag.h
+include/zeek/logging/WriterBackend.h
+include/zeek/logging/WriterFrontend.h
+include/zeek/logging/logging.bif.h
+include/zeek/logging/writers/ascii/Ascii.h
+include/zeek/logging/writers/ascii/ascii.bif.h
+include/zeek/logging/writers/none/None.h
+include/zeek/logging/writers/none/none.bif.h
+include/zeek/logging/writers/sqlite/SQLite.h
+include/zeek/logging/writers/sqlite/sqlite.bif.h
+include/zeek/modp_numtoa.h
+include/zeek/module_util.h
+include/zeek/nb_dns.h
+include/zeek/net_util.h
+include/zeek/option.bif.func_h
+include/zeek/option.bif.netvar_h
+include/zeek/patricia.h
+include/zeek/plugin/Component.h
+include/zeek/plugin/ComponentManager.h
+include/zeek/plugin/Manager.h
+include/zeek/plugin/Plugin.h
+include/zeek/plugin/TaggedComponent.h
+include/zeek/probabilistic/BitVector.h
+include/zeek/probabilistic/BloomFilter.h
+include/zeek/probabilistic/CardinalityCounter.h
+include/zeek/probabilistic/CounterVector.h
+include/zeek/probabilistic/Hasher.h
+include/zeek/probabilistic/Topk.h
+include/zeek/probabilistic/bloom-filter.bif.h
+include/zeek/probabilistic/cardinality-counter.bif.h
+include/zeek/probabilistic/top-k.bif.h
+include/zeek/reporter.bif.func_h
+include/zeek/reporter.bif.netvar_h
+include/zeek/setsignal.h
+include/zeek/siphash24.h
+include/zeek/stats.bif.func_h
+include/zeek/stats.bif.netvar_h
+include/zeek/strings.bif.func_h
+include/zeek/strings.bif.netvar_h
+include/zeek/threading/BasicThread.h
+include/zeek/threading/Formatter.h
+include/zeek/threading/Manager.h
+include/zeek/threading/MsgThread.h
+include/zeek/threading/Queue.h
+include/zeek/threading/SerialTypes.h
+include/zeek/threading/formatters/Ascii.h
+include/zeek/threading/formatters/JSON.h
+include/zeek/types.bif.func_h
+include/zeek/types.bif.netvar_h
+include/zeek/util.h
+include/zeek/zeek-config.h
+include/zeek/zeek.bif.func_h
+include/zeek/zeek.bif.netvar_h
+include/zeek/zeekygen/Configuration.h
+include/zeek/zeekygen/IdentifierInfo.h
+include/zeek/zeekygen/Info.h
+include/zeek/zeekygen/Manager.h
+include/zeek/zeekygen/PackageInfo.h
+include/zeek/zeekygen/ReStructuredTextTable.h
+include/zeek/zeekygen/ScriptInfo.h
+include/zeek/zeekygen/Target.h
+include/zeek/zeekygen/utils.h
+include/zeek/zeekygen/zeekygen.bif.h
+%%ZEEKCTL%%lib/broctl
+lib/libbinpac.so
+lib/libbinpac.so.0
+lib/libbinpac.so.0.54
%%BROKER%%lib/libbroker.a
%%BROKER%%lib/libcaf_core_static.a
%%BROKER%%lib/libcaf_io_static.a
%%BROKER%%lib/libcaf_openssl_static.a
-man/man1/bro-cut.1.gz
-%%BROCTL%%man/man1/trace-summary.1.gz
-man/man8/bro.8.gz
-%%BROCTL%%man/man8/broctl.8.gz
-%%DATADIR%%/base/bif/__load__.bro
-%%DATADIR%%/base/bif/analyzer.bif.bro
-%%DATADIR%%/base/bif/bloom-filter.bif.bro
-%%DATADIR%%/base/bif/bro.bif.bro
-%%DATADIR%%/base/bif/broxygen.bif.bro
-%%DATADIR%%/base/bif/cardinality-counter.bif.bro
-%%DATADIR%%/base/bif/comm.bif.bro
-%%DATADIR%%/base/bif/const.bif.bro
-%%DATADIR%%/base/bif/data.bif.bro
-%%DATADIR%%/base/bif/event.bif.bro
-%%DATADIR%%/base/bif/file_analysis.bif.bro
-%%DATADIR%%/base/bif/input.bif.bro
-%%DATADIR%%/base/bif/logging.bif.bro
-%%DATADIR%%/base/bif/messaging.bif.bro
-%%DATADIR%%/base/bif/option.bif.bro
-%%DATADIR%%/base/bif/pcap.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_ARP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_AsciiReader.ascii.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_AsciiWriter.ascii.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_BackDoor.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_BenchmarkReader.benchmark.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_BinaryReader.binary.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_BitTorrent.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_ConfigReader.config.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_ConnSize.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_ConnSize.functions.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.consts.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.types.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_DHCP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_DHCP.types.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_DNP3.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_DNS.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_FTP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_FTP.functions.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_File.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_FileEntropy.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_FileExtract.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_FileExtract.functions.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_FileHash.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_Finger.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_GSSAPI.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_GTPv1.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_Gnutella.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_HTTP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_HTTP.functions.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_ICMP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_IMAP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_IRC.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_Ident.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_InterConn.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_KRB.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_KRB.types.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_Login.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_Login.functions.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_MIME.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_Modbus.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_MySQL.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_NCP.consts.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_NCP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_NTLM.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_NTLM.types.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_NTP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_NetBIOS.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_NetBIOS.functions.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_NoneWriter.none.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_PE.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_POP3.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_RADIUS.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_RDP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_RDP.types.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_RFB.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_RPC.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_RawReader.raw.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SIP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.consts.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_check_directory.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_close.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_create_directory.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_echo.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_logoff_andx.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_negotiate.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_nt_cancel.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_nt_create_andx.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_query_information.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_read_andx.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_session_setup_andx.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_transaction.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_transaction2.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_transaction2_secondary.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_transaction_secondary.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_tree_connect_andx.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_tree_disconnect.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_write_andx.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_close.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_create.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_negotiate.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_read.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_session_setup.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_set_info.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_tree_connect.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_tree_disconnect.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_write.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMB.types.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMTP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SMTP.functions.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SNMP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SNMP.types.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SOCKS.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SQLiteReader.sqlite.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SQLiteWriter.sqlite.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SSH.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SSH.types.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SSL.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SSL.functions.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SSL.types.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_SteppingStone.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_Syslog.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_TCP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_TCP.functions.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_Teredo.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_UDP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_Unified2.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_Unified2.types.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_X509.events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_X509.functions.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_X509.ocsp_events.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_X509.types.bif.bro
-%%DATADIR%%/base/bif/plugins/Bro_XMPP.events.bif.bro
-%%DATADIR%%/base/bif/plugins/__load__.bro
-%%DATADIR%%/base/bif/reporter.bif.bro
-%%DATADIR%%/base/bif/stats.bif.bro
-%%DATADIR%%/base/bif/store.bif.bro
-%%DATADIR%%/base/bif/strings.bif.bro
-%%DATADIR%%/base/bif/top-k.bif.bro
-%%DATADIR%%/base/bif/types.bif.bro
-%%DATADIR%%/base/files/extract/__load__.bro
-%%DATADIR%%/base/files/extract/main.bro
-%%DATADIR%%/base/files/hash/__load__.bro
-%%DATADIR%%/base/files/hash/main.bro
-%%DATADIR%%/base/files/pe/__load__.bro
-%%DATADIR%%/base/files/pe/consts.bro
-%%DATADIR%%/base/files/pe/main.bro
-%%DATADIR%%/base/files/unified2/__load__.bro
-%%DATADIR%%/base/files/unified2/main.bro
-%%DATADIR%%/base/files/x509/__load__.bro
-%%DATADIR%%/base/files/x509/main.bro
-%%DATADIR%%/base/frameworks/analyzer/__load__.bro
-%%DATADIR%%/base/frameworks/analyzer/main.bro
-%%DATADIR%%/base/frameworks/broker/__load__.bro
-%%DATADIR%%/base/frameworks/broker/log.bro
-%%DATADIR%%/base/frameworks/broker/main.bro
-%%DATADIR%%/base/frameworks/broker/store.bro
-%%DATADIR%%/base/frameworks/cluster/__load__.bro
-%%DATADIR%%/base/frameworks/cluster/main.bro
-%%DATADIR%%/base/frameworks/cluster/nodes/logger.bro
-%%DATADIR%%/base/frameworks/cluster/nodes/manager.bro
-%%DATADIR%%/base/frameworks/cluster/nodes/proxy.bro
-%%DATADIR%%/base/frameworks/cluster/nodes/worker.bro
-%%DATADIR%%/base/frameworks/cluster/pools.bro
-%%DATADIR%%/base/frameworks/cluster/setup-connections.bro
-%%DATADIR%%/base/frameworks/config/__load__.bro
-%%DATADIR%%/base/frameworks/config/input.bro
-%%DATADIR%%/base/frameworks/config/main.bro
-%%DATADIR%%/base/frameworks/config/weird.bro
-%%DATADIR%%/base/frameworks/control/__load__.bro
-%%DATADIR%%/base/frameworks/control/main.bro
-%%DATADIR%%/base/frameworks/dpd/__load__.bro
-%%DATADIR%%/base/frameworks/dpd/main.bro
-%%DATADIR%%/base/frameworks/files/__load__.bro
-%%DATADIR%%/base/frameworks/files/magic/__load__.bro
+lib/libparaglob.a
+%%NETMAP%%lib/zeek/plugins/Bro_Netmap/COPYING
+%%NETMAP%%lib/zeek/plugins/Bro_Netmap/__bro_plugin__
+%%NETMAP%%lib/zeek/plugins/Bro_Netmap/broctl/netmap.py
+%%NETMAP%%lib/zeek/plugins/Bro_Netmap/lib/Bro-Netmap.%%LCASE_OPSYS%%-%%ARCH%%.so
+%%NETMAP%%lib/zeek/plugins/Bro_Netmap/scripts/__load__.bro
+%%NETMAP%%lib/zeek/plugins/Bro_Netmap/scripts/init.bro
+%%ZEEKCTL%%lib/zeekctl/BroControl/__init__.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/BroControl/__init__.pyc
+%%ZEEKCTL%%lib/zeekctl/BroControl/cmdresult.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/BroControl/cmdresult.pyc
+%%ZEEKCTL%%lib/zeekctl/BroControl/config.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/BroControl/config.pyc
+%%ZEEKCTL%%lib/zeekctl/BroControl/plugin.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/BroControl/plugin.pyc
+%%ZEEKCTL%%lib/zeekctl/SubnetTree.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/SubnetTree.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/__init__.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/__init__.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/cmdresult.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/cmdresult.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/config.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/config.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/control.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/control.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/cron.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/cron.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/doc.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/doc.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/events.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/events.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/exceptions.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/exceptions.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/execute.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/execute.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/install.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/install.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/lock.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/lock.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/node.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/node.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/options.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/options.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/plugin.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/plugin.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/pluginreg.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/pluginreg.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/printdoc.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/printdoc.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/py3zeek.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/py3zeek.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/ssh_runner.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/ssh_runner.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/state.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/state.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/util.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/util.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/utilcurses.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/utilcurses.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/version.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/version.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/zeekcmd.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/zeekcmd.pyc
+%%ZEEKCTL%%lib/zeekctl/ZeekControl/zeekctl.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/ZeekControl/zeekctl.pyc
+%%ZEEKCTL%%lib/zeekctl/_SubnetTree.so
+%%ZEEKCTL%%lib/zeekctl/broker/__init__.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/broker/__init__.pyc
+%%ZEEKCTL%%lib/zeekctl/broker/_broker.so
+%%ZEEKCTL%%lib/zeekctl/broker/bro.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/broker/bro.pyc
+%%ZEEKCTL%%lib/zeekctl/broker/zeek.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/broker/zeek.pyc
+%%ZEEKCTL%%lib/zeekctl/plugins/TestPlugin.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/plugins/TestPlugin.pyc
+%%ZEEKCTL%%lib/zeekctl/plugins/lb_custom.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/plugins/lb_custom.pyc
+%%ZEEKCTL%%lib/zeekctl/plugins/lb_myricom.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/plugins/lb_myricom.pyc
+%%ZEEKCTL%%lib/zeekctl/plugins/lb_pf_ring.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/plugins/lb_pf_ring.pyc
+%%ZEEKCTL%%lib/zeekctl/plugins/ps.py
+%%ZEEKCTL%%@preunexec rm -f %D/lib/zeekctl/plugins/ps.pyc
+%%ZEEKCTL%%man/man1/trace-summary.1.gz
+man/man1/zeek-cut.1.gz
+man/man8/zeek.8.gz
+%%ZEEKCTL%%man/man8/zeekctl.8.gz
+%%DATADIR%%/base/bif/__load__.zeek
+%%DATADIR%%/base/bif/analyzer.bif.zeek
+%%DATADIR%%/base/bif/bloom-filter.bif.zeek
+%%DATADIR%%/base/bif/cardinality-counter.bif.zeek
+%%DATADIR%%/base/bif/comm.bif.zeek
+%%DATADIR%%/base/bif/const.bif.zeek
+%%DATADIR%%/base/bif/data.bif.zeek
+%%DATADIR%%/base/bif/event.bif.zeek
+%%DATADIR%%/base/bif/file_analysis.bif.zeek
+%%DATADIR%%/base/bif/input.bif.zeek
+%%DATADIR%%/base/bif/logging.bif.zeek
+%%DATADIR%%/base/bif/messaging.bif.zeek
+%%DATADIR%%/base/bif/option.bif.zeek
+%%DATADIR%%/base/bif/pcap.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_ARP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_AsciiReader.ascii.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_AsciiWriter.ascii.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_BenchmarkReader.benchmark.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_BinaryReader.binary.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_BitTorrent.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_ConfigReader.config.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_ConnSize.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_ConnSize.functions.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_DCE_RPC.consts.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_DCE_RPC.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_DCE_RPC.types.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_DHCP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_DHCP.types.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_DNP3.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_DNS.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_FTP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_FTP.functions.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_File.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_FileEntropy.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_FileExtract.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_FileExtract.functions.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_FileHash.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_Finger.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_GSSAPI.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_GTPv1.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_Gnutella.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_HTTP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_HTTP.functions.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_ICMP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_IMAP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_IRC.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_Ident.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_KRB.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_KRB.types.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_Login.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_Login.functions.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_MIME.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_MQTT.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_MQTT.types.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_Modbus.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_MySQL.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_NCP.consts.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_NCP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_NTLM.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_NTLM.types.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_NTP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_NTP.types.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_NetBIOS.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_NetBIOS.functions.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_NoneWriter.none.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_PE.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_POP3.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_RADIUS.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_RDP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_RDP.types.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_RFB.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_RPC.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_RawReader.raw.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SIP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.consts.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_check_directory.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_close.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_create_directory.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_echo.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_logoff_andx.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_negotiate.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_nt_cancel.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_nt_create_andx.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_query_information.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_read_andx.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_session_setup_andx.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_transaction.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_transaction2.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_transaction2_secondary.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_transaction_secondary.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_tree_connect_andx.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_tree_disconnect.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_com_write_andx.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb1_events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_close.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_create.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_negotiate.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_read.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_session_setup.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_set_info.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_transform_header.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_tree_connect.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_tree_disconnect.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_com_write.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.smb2_events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMB.types.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMTP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SMTP.functions.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SNMP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SNMP.types.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SOCKS.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SQLiteReader.sqlite.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SQLiteWriter.sqlite.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SSH.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SSH.types.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SSL.consts.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SSL.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SSL.functions.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SSL.types.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_SteppingStone.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_Syslog.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_TCP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_TCP.functions.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_Teredo.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_UDP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_Unified2.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_Unified2.types.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_VXLAN.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_X509.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_X509.functions.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_X509.ocsp_events.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_X509.types.bif.zeek
+%%DATADIR%%/base/bif/plugins/Zeek_XMPP.events.bif.zeek
+%%DATADIR%%/base/bif/plugins/__load__.zeek
+%%DATADIR%%/base/bif/reporter.bif.zeek
+%%DATADIR%%/base/bif/stats.bif.zeek
+%%DATADIR%%/base/bif/store.bif.zeek
+%%DATADIR%%/base/bif/strings.bif.zeek
+%%DATADIR%%/base/bif/top-k.bif.zeek
+%%DATADIR%%/base/bif/types.bif.zeek
+%%DATADIR%%/base/bif/zeek.bif.zeek
+%%DATADIR%%/base/bif/zeekygen.bif.zeek
+%%DATADIR%%/base/files/extract/__load__.zeek
+%%DATADIR%%/base/files/extract/main.zeek
+%%DATADIR%%/base/files/hash/__load__.zeek
+%%DATADIR%%/base/files/hash/main.zeek
+%%DATADIR%%/base/files/pe/__load__.zeek
+%%DATADIR%%/base/files/pe/consts.zeek
+%%DATADIR%%/base/files/pe/main.zeek
+%%DATADIR%%/base/files/x509/__load__.zeek
+%%DATADIR%%/base/files/x509/main.zeek
+%%DATADIR%%/base/frameworks/analyzer/__load__.zeek
+%%DATADIR%%/base/frameworks/analyzer/main.zeek
+%%DATADIR%%/base/frameworks/broker/__load__.zeek
+%%DATADIR%%/base/frameworks/broker/log.zeek
+%%DATADIR%%/base/frameworks/broker/main.zeek
+%%DATADIR%%/base/frameworks/broker/store.zeek
+%%DATADIR%%/base/frameworks/cluster/__load__.zeek
+%%DATADIR%%/base/frameworks/cluster/main.zeek
+%%DATADIR%%/base/frameworks/cluster/nodes/logger.zeek
+%%DATADIR%%/base/frameworks/cluster/nodes/manager.zeek
+%%DATADIR%%/base/frameworks/cluster/nodes/proxy.zeek
+%%DATADIR%%/base/frameworks/cluster/nodes/worker.zeek
+%%DATADIR%%/base/frameworks/cluster/pools.zeek
+%%DATADIR%%/base/frameworks/cluster/setup-connections.zeek
+%%DATADIR%%/base/frameworks/config/__load__.zeek
+%%DATADIR%%/base/frameworks/config/input.zeek
+%%DATADIR%%/base/frameworks/config/main.zeek
+%%DATADIR%%/base/frameworks/config/weird.zeek
+%%DATADIR%%/base/frameworks/control/__load__.zeek
+%%DATADIR%%/base/frameworks/control/main.zeek
+%%DATADIR%%/base/frameworks/dpd/__load__.zeek
+%%DATADIR%%/base/frameworks/dpd/main.zeek
+%%DATADIR%%/base/frameworks/files/__load__.zeek
+%%DATADIR%%/base/frameworks/files/magic/__load__.zeek
%%DATADIR%%/base/frameworks/files/magic/archive.sig
%%DATADIR%%/base/frameworks/files/magic/audio.sig
%%DATADIR%%/base/frameworks/files/magic/font.sig
@@ -1338,381 +1387,391 @@
%%DATADIR%%/base/frameworks/files/magic/libmagic.sig
%%DATADIR%%/base/frameworks/files/magic/msoffice.sig
%%DATADIR%%/base/frameworks/files/magic/video.sig
-%%DATADIR%%/base/frameworks/files/main.bro
-%%DATADIR%%/base/frameworks/input/__load__.bro
-%%DATADIR%%/base/frameworks/input/main.bro
-%%DATADIR%%/base/frameworks/input/readers/ascii.bro
-%%DATADIR%%/base/frameworks/input/readers/benchmark.bro
-%%DATADIR%%/base/frameworks/input/readers/binary.bro
-%%DATADIR%%/base/frameworks/input/readers/config.bro
-%%DATADIR%%/base/frameworks/input/readers/raw.bro
-%%DATADIR%%/base/frameworks/input/readers/sqlite.bro
-%%DATADIR%%/base/frameworks/intel/__load__.bro
-%%DATADIR%%/base/frameworks/intel/cluster.bro
-%%DATADIR%%/base/frameworks/intel/files.bro
-%%DATADIR%%/base/frameworks/intel/input.bro
-%%DATADIR%%/base/frameworks/intel/main.bro
-%%DATADIR%%/base/frameworks/logging/__load__.bro
-%%DATADIR%%/base/frameworks/logging/main.bro
-%%DATADIR%%/base/frameworks/logging/postprocessors/__load__.bro
-%%DATADIR%%/base/frameworks/logging/postprocessors/scp.bro
-%%DATADIR%%/base/frameworks/logging/postprocessors/sftp.bro
-%%DATADIR%%/base/frameworks/logging/writers/ascii.bro
-%%DATADIR%%/base/frameworks/logging/writers/none.bro
-%%DATADIR%%/base/frameworks/logging/writers/sqlite.bro
-%%DATADIR%%/base/frameworks/netcontrol/__load__.bro
-%%DATADIR%%/base/frameworks/netcontrol/catch-and-release.bro
-%%DATADIR%%/base/frameworks/netcontrol/cluster.bro
-%%DATADIR%%/base/frameworks/netcontrol/drop.bro
-%%DATADIR%%/base/frameworks/netcontrol/main.bro
-%%DATADIR%%/base/frameworks/netcontrol/non-cluster.bro
-%%DATADIR%%/base/frameworks/netcontrol/plugin.bro
-%%DATADIR%%/base/frameworks/netcontrol/plugins/__load__.bro
-%%DATADIR%%/base/frameworks/netcontrol/plugins/acld.bro
-%%DATADIR%%/base/frameworks/netcontrol/plugins/broker.bro
-%%DATADIR%%/base/frameworks/netcontrol/plugins/debug.bro
-%%DATADIR%%/base/frameworks/netcontrol/plugins/openflow.bro
-%%DATADIR%%/base/frameworks/netcontrol/plugins/packetfilter.bro
-%%DATADIR%%/base/frameworks/netcontrol/shunt.bro
-%%DATADIR%%/base/frameworks/netcontrol/types.bro
-%%DATADIR%%/base/frameworks/notice/__load__.bro
-%%DATADIR%%/base/frameworks/notice/actions/add-geodata.bro
-%%DATADIR%%/base/frameworks/notice/actions/drop.bro
-%%DATADIR%%/base/frameworks/notice/actions/email_admin.bro
-%%DATADIR%%/base/frameworks/notice/actions/page.bro
-%%DATADIR%%/base/frameworks/notice/actions/pp-alarms.bro
-%%DATADIR%%/base/frameworks/notice/main.bro
-%%DATADIR%%/base/frameworks/notice/weird.bro
-%%DATADIR%%/base/frameworks/openflow/__load__.bro
-%%DATADIR%%/base/frameworks/openflow/cluster.bro
-%%DATADIR%%/base/frameworks/openflow/consts.bro
-%%DATADIR%%/base/frameworks/openflow/main.bro
-%%DATADIR%%/base/frameworks/openflow/non-cluster.bro
-%%DATADIR%%/base/frameworks/openflow/plugins/__load__.bro
-%%DATADIR%%/base/frameworks/openflow/plugins/broker.bro
-%%DATADIR%%/base/frameworks/openflow/plugins/log.bro
-%%DATADIR%%/base/frameworks/openflow/plugins/ryu.bro
-%%DATADIR%%/base/frameworks/openflow/types.bro
-%%DATADIR%%/base/frameworks/packet-filter/__load__.bro
-%%DATADIR%%/base/frameworks/packet-filter/cluster.bro
-%%DATADIR%%/base/frameworks/packet-filter/main.bro
-%%DATADIR%%/base/frameworks/packet-filter/netstats.bro
-%%DATADIR%%/base/frameworks/packet-filter/utils.bro
-%%DATADIR%%/base/frameworks/reporter/__load__.bro
-%%DATADIR%%/base/frameworks/reporter/main.bro
-%%DATADIR%%/base/frameworks/signatures/__load__.bro
-%%DATADIR%%/base/frameworks/signatures/main.bro
-%%DATADIR%%/base/frameworks/software/__load__.bro
-%%DATADIR%%/base/frameworks/software/main.bro
-%%DATADIR%%/base/frameworks/sumstats/__load__.bro
-%%DATADIR%%/base/frameworks/sumstats/cluster.bro
-%%DATADIR%%/base/frameworks/sumstats/main.bro
-%%DATADIR%%/base/frameworks/sumstats/non-cluster.bro
-%%DATADIR%%/base/frameworks/sumstats/plugins/__load__.bro
-%%DATADIR%%/base/frameworks/sumstats/plugins/average.bro
-%%DATADIR%%/base/frameworks/sumstats/plugins/hll_unique.bro
-%%DATADIR%%/base/frameworks/sumstats/plugins/last.bro
-%%DATADIR%%/base/frameworks/sumstats/plugins/max.bro
-%%DATADIR%%/base/frameworks/sumstats/plugins/min.bro
-%%DATADIR%%/base/frameworks/sumstats/plugins/sample.bro
-%%DATADIR%%/base/frameworks/sumstats/plugins/std-dev.bro
-%%DATADIR%%/base/frameworks/sumstats/plugins/sum.bro
-%%DATADIR%%/base/frameworks/sumstats/plugins/topk.bro
-%%DATADIR%%/base/frameworks/sumstats/plugins/unique.bro
-%%DATADIR%%/base/frameworks/sumstats/plugins/variance.bro
-%%DATADIR%%/base/frameworks/tunnels/__load__.bro
-%%DATADIR%%/base/frameworks/tunnels/main.bro
-%%DATADIR%%/base/init-bare.bro
-%%DATADIR%%/base/init-default.bro
-%%DATADIR%%/base/init-frameworks-and-bifs.bro
-%%DATADIR%%/base/misc/find-checksum-offloading.bro
-%%DATADIR%%/base/misc/find-filtered-trace.bro
-%%DATADIR%%/base/misc/p0f.fp
-%%DATADIR%%/base/misc/version.bro
-%%DATADIR%%/base/protocols/conn/__load__.bro
-%%DATADIR%%/base/protocols/conn/contents.bro
-%%DATADIR%%/base/protocols/conn/inactivity.bro
-%%DATADIR%%/base/protocols/conn/main.bro
-%%DATADIR%%/base/protocols/conn/polling.bro
-%%DATADIR%%/base/protocols/conn/thresholds.bro
-%%DATADIR%%/base/protocols/dce-rpc/__load__.bro
-%%DATADIR%%/base/protocols/dce-rpc/consts.bro
+%%DATADIR%%/base/frameworks/files/main.zeek
+%%DATADIR%%/base/frameworks/input/__load__.zeek
+%%DATADIR%%/base/frameworks/input/main.zeek
+%%DATADIR%%/base/frameworks/input/readers/ascii.zeek
+%%DATADIR%%/base/frameworks/input/readers/benchmark.zeek
+%%DATADIR%%/base/frameworks/input/readers/binary.zeek
+%%DATADIR%%/base/frameworks/input/readers/config.zeek
+%%DATADIR%%/base/frameworks/input/readers/raw.zeek
+%%DATADIR%%/base/frameworks/input/readers/sqlite.zeek
+%%DATADIR%%/base/frameworks/intel/__load__.zeek
+%%DATADIR%%/base/frameworks/intel/cluster.zeek
+%%DATADIR%%/base/frameworks/intel/files.zeek
+%%DATADIR%%/base/frameworks/intel/input.zeek
+%%DATADIR%%/base/frameworks/intel/main.zeek
+%%DATADIR%%/base/frameworks/logging/__load__.zeek
+%%DATADIR%%/base/frameworks/logging/main.zeek
+%%DATADIR%%/base/frameworks/logging/postprocessors/__load__.zeek
+%%DATADIR%%/base/frameworks/logging/postprocessors/scp.zeek
+%%DATADIR%%/base/frameworks/logging/postprocessors/sftp.zeek
+%%DATADIR%%/base/frameworks/logging/writers/ascii.zeek
+%%DATADIR%%/base/frameworks/logging/writers/none.zeek
+%%DATADIR%%/base/frameworks/logging/writers/sqlite.zeek
+%%DATADIR%%/base/frameworks/netcontrol/__load__.zeek
+%%DATADIR%%/base/frameworks/netcontrol/cluster.zeek
+%%DATADIR%%/base/frameworks/netcontrol/drop.zeek
+%%DATADIR%%/base/frameworks/netcontrol/main.zeek
+%%DATADIR%%/base/frameworks/netcontrol/non-cluster.zeek
+%%DATADIR%%/base/frameworks/netcontrol/plugin.zeek
+%%DATADIR%%/base/frameworks/netcontrol/plugins/__load__.zeek
+%%DATADIR%%/base/frameworks/netcontrol/plugins/acld.zeek
+%%DATADIR%%/base/frameworks/netcontrol/plugins/broker.zeek
+%%DATADIR%%/base/frameworks/netcontrol/plugins/debug.zeek
+%%DATADIR%%/base/frameworks/netcontrol/plugins/openflow.zeek
+%%DATADIR%%/base/frameworks/netcontrol/plugins/packetfilter.zeek
+%%DATADIR%%/base/frameworks/netcontrol/shunt.zeek
+%%DATADIR%%/base/frameworks/netcontrol/types.zeek
+%%DATADIR%%/base/frameworks/notice/__load__.zeek
+%%DATADIR%%/base/frameworks/notice/actions/add-geodata.zeek
+%%DATADIR%%/base/frameworks/notice/actions/email_admin.zeek
+%%DATADIR%%/base/frameworks/notice/actions/page.zeek
+%%DATADIR%%/base/frameworks/notice/actions/pp-alarms.zeek
+%%DATADIR%%/base/frameworks/notice/main.zeek
+%%DATADIR%%/base/frameworks/notice/weird.zeek
+%%DATADIR%%/base/frameworks/openflow/__load__.zeek
+%%DATADIR%%/base/frameworks/openflow/cluster.zeek
+%%DATADIR%%/base/frameworks/openflow/consts.zeek
+%%DATADIR%%/base/frameworks/openflow/main.zeek
+%%DATADIR%%/base/frameworks/openflow/non-cluster.zeek
+%%DATADIR%%/base/frameworks/openflow/plugins/__load__.zeek
+%%DATADIR%%/base/frameworks/openflow/plugins/broker.zeek
+%%DATADIR%%/base/frameworks/openflow/plugins/log.zeek
+%%DATADIR%%/base/frameworks/openflow/plugins/ryu.zeek
+%%DATADIR%%/base/frameworks/openflow/types.zeek
+%%DATADIR%%/base/frameworks/packet-filter/__load__.zeek
+%%DATADIR%%/base/frameworks/packet-filter/cluster.zeek
+%%DATADIR%%/base/frameworks/packet-filter/main.zeek
+%%DATADIR%%/base/frameworks/packet-filter/netstats.zeek
+%%DATADIR%%/base/frameworks/packet-filter/utils.zeek
+%%DATADIR%%/base/frameworks/reporter/__load__.zeek
+%%DATADIR%%/base/frameworks/reporter/main.zeek
+%%DATADIR%%/base/frameworks/signatures/__load__.zeek
+%%DATADIR%%/base/frameworks/signatures/main.zeek
+%%DATADIR%%/base/frameworks/software/__load__.zeek
+%%DATADIR%%/base/frameworks/software/main.zeek
+%%DATADIR%%/base/frameworks/sumstats/__load__.zeek
+%%DATADIR%%/base/frameworks/sumstats/cluster.zeek
+%%DATADIR%%/base/frameworks/sumstats/main.zeek
+%%DATADIR%%/base/frameworks/sumstats/non-cluster.zeek
+%%DATADIR%%/base/frameworks/sumstats/plugins/__load__.zeek
+%%DATADIR%%/base/frameworks/sumstats/plugins/average.zeek
+%%DATADIR%%/base/frameworks/sumstats/plugins/hll_unique.zeek
+%%DATADIR%%/base/frameworks/sumstats/plugins/last.zeek
+%%DATADIR%%/base/frameworks/sumstats/plugins/max.zeek
+%%DATADIR%%/base/frameworks/sumstats/plugins/min.zeek
+%%DATADIR%%/base/frameworks/sumstats/plugins/sample.zeek
+%%DATADIR%%/base/frameworks/sumstats/plugins/std-dev.zeek
+%%DATADIR%%/base/frameworks/sumstats/plugins/sum.zeek
+%%DATADIR%%/base/frameworks/sumstats/plugins/topk.zeek
+%%DATADIR%%/base/frameworks/sumstats/plugins/unique.zeek
+%%DATADIR%%/base/frameworks/sumstats/plugins/variance.zeek
+%%DATADIR%%/base/frameworks/tunnels/__load__.zeek
+%%DATADIR%%/base/frameworks/tunnels/main.zeek
+%%DATADIR%%/base/init-bare.zeek
+%%DATADIR%%/base/init-default.zeek
+%%DATADIR%%/base/init-frameworks-and-bifs.zeek
+%%DATADIR%%/base/misc/find-checksum-offloading.zeek
+%%DATADIR%%/base/misc/find-filtered-trace.zeek
+%%DATADIR%%/base/misc/version.zeek
+%%DATADIR%%/base/protocols/conn/__load__.zeek
+%%DATADIR%%/base/protocols/conn/contents.zeek
+%%DATADIR%%/base/protocols/conn/inactivity.zeek
+%%DATADIR%%/base/protocols/conn/main.zeek
+%%DATADIR%%/base/protocols/conn/polling.zeek
+%%DATADIR%%/base/protocols/conn/thresholds.zeek
+%%DATADIR%%/base/protocols/dce-rpc/__load__.zeek
+%%DATADIR%%/base/protocols/dce-rpc/consts.zeek
%%DATADIR%%/base/protocols/dce-rpc/dpd.sig
-%%DATADIR%%/base/protocols/dce-rpc/main.bro
-%%DATADIR%%/base/protocols/dhcp/__load__.bro
-%%DATADIR%%/base/protocols/dhcp/consts.bro
+%%DATADIR%%/base/protocols/dce-rpc/main.zeek
+%%DATADIR%%/base/protocols/dhcp/__load__.zeek
+%%DATADIR%%/base/protocols/dhcp/consts.zeek
%%DATADIR%%/base/protocols/dhcp/dpd.sig
-%%DATADIR%%/base/protocols/dhcp/main.bro
-%%DATADIR%%/base/protocols/dnp3/__load__.bro
-%%DATADIR%%/base/protocols/dnp3/consts.bro
+%%DATADIR%%/base/protocols/dhcp/main.zeek
+%%DATADIR%%/base/protocols/dnp3/__load__.zeek
+%%DATADIR%%/base/protocols/dnp3/consts.zeek
%%DATADIR%%/base/protocols/dnp3/dpd.sig
-%%DATADIR%%/base/protocols/dnp3/main.bro
-%%DATADIR%%/base/protocols/dns/__load__.bro
-%%DATADIR%%/base/protocols/dns/consts.bro
-%%DATADIR%%/base/protocols/dns/main.bro
-%%DATADIR%%/base/protocols/ftp/__load__.bro
+%%DATADIR%%/base/protocols/dnp3/main.zeek
+%%DATADIR%%/base/protocols/dns/__load__.zeek
+%%DATADIR%%/base/protocols/dns/consts.zeek
+%%DATADIR%%/base/protocols/dns/main.zeek
+%%DATADIR%%/base/protocols/ftp/__load__.zeek
%%DATADIR%%/base/protocols/ftp/dpd.sig
-%%DATADIR%%/base/protocols/ftp/files.bro
-%%DATADIR%%/base/protocols/ftp/gridftp.bro
-%%DATADIR%%/base/protocols/ftp/info.bro
-%%DATADIR%%/base/protocols/ftp/main.bro
-%%DATADIR%%/base/protocols/ftp/utils-commands.bro
-%%DATADIR%%/base/protocols/ftp/utils.bro
-%%DATADIR%%/base/protocols/http/__load__.bro
+%%DATADIR%%/base/protocols/ftp/files.zeek
+%%DATADIR%%/base/protocols/ftp/gridftp.zeek
+%%DATADIR%%/base/protocols/ftp/info.zeek
+%%DATADIR%%/base/protocols/ftp/main.zeek
+%%DATADIR%%/base/protocols/ftp/utils-commands.zeek
+%%DATADIR%%/base/protocols/ftp/utils.zeek
+%%DATADIR%%/base/protocols/http/__load__.zeek
%%DATADIR%%/base/protocols/http/dpd.sig
-%%DATADIR%%/base/protocols/http/entities.bro
-%%DATADIR%%/base/protocols/http/files.bro
-%%DATADIR%%/base/protocols/http/main.bro
-%%DATADIR%%/base/protocols/http/utils.bro
-%%DATADIR%%/base/protocols/imap/__load__.bro
-%%DATADIR%%/base/protocols/imap/main.bro
-%%DATADIR%%/base/protocols/irc/__load__.bro
-%%DATADIR%%/base/protocols/irc/dcc-send.bro
+%%DATADIR%%/base/protocols/http/entities.zeek
+%%DATADIR%%/base/protocols/http/files.zeek
+%%DATADIR%%/base/protocols/http/main.zeek
+%%DATADIR%%/base/protocols/http/utils.zeek
+%%DATADIR%%/base/protocols/imap/__load__.zeek
+%%DATADIR%%/base/protocols/imap/main.zeek
+%%DATADIR%%/base/protocols/irc/__load__.zeek
+%%DATADIR%%/base/protocols/irc/dcc-send.zeek
%%DATADIR%%/base/protocols/irc/dpd.sig
-%%DATADIR%%/base/protocols/irc/files.bro
-%%DATADIR%%/base/protocols/irc/main.bro
-%%DATADIR%%/base/protocols/krb/__load__.bro
-%%DATADIR%%/base/protocols/krb/consts.bro
+%%DATADIR%%/base/protocols/irc/files.zeek
+%%DATADIR%%/base/protocols/irc/main.zeek
+%%DATADIR%%/base/protocols/krb/__load__.zeek
+%%DATADIR%%/base/protocols/krb/consts.zeek
%%DATADIR%%/base/protocols/krb/dpd.sig
-%%DATADIR%%/base/protocols/krb/files.bro
-%%DATADIR%%/base/protocols/krb/main.bro
-%%DATADIR%%/base/protocols/modbus/__load__.bro
-%%DATADIR%%/base/protocols/modbus/consts.bro
-%%DATADIR%%/base/protocols/modbus/main.bro
-%%DATADIR%%/base/protocols/mysql/__load__.bro
-%%DATADIR%%/base/protocols/mysql/consts.bro
-%%DATADIR%%/base/protocols/mysql/main.bro
-%%DATADIR%%/base/protocols/ntlm/__load__.bro
-%%DATADIR%%/base/protocols/ntlm/main.bro
-%%DATADIR%%/base/protocols/pop3/__load__.bro
+%%DATADIR%%/base/protocols/krb/files.zeek
+%%DATADIR%%/base/protocols/krb/main.zeek
+%%DATADIR%%/base/protocols/modbus/__load__.zeek
+%%DATADIR%%/base/protocols/modbus/consts.zeek
+%%DATADIR%%/base/protocols/modbus/main.zeek
+%%DATADIR%%/base/protocols/mqtt/__load__.zeek
+%%DATADIR%%/base/protocols/mqtt/consts.zeek
+%%DATADIR%%/base/protocols/mysql/__load__.zeek
+%%DATADIR%%/base/protocols/mysql/consts.zeek
+%%DATADIR%%/base/protocols/mysql/main.zeek
+%%DATADIR%%/base/protocols/ntlm/__load__.zeek
+%%DATADIR%%/base/protocols/ntlm/main.zeek
+%%DATADIR%%/base/protocols/ntp/__load__.zeek
+%%DATADIR%%/base/protocols/ntp/consts.zeek
+%%DATADIR%%/base/protocols/ntp/main.zeek
+%%DATADIR%%/base/protocols/pop3/__load__.zeek
%%DATADIR%%/base/protocols/pop3/dpd.sig
-%%DATADIR%%/base/protocols/radius/__load__.bro
-%%DATADIR%%/base/protocols/radius/consts.bro
-%%DATADIR%%/base/protocols/radius/main.bro
-%%DATADIR%%/base/protocols/rdp/__load__.bro
-%%DATADIR%%/base/protocols/rdp/consts.bro
+%%DATADIR%%/base/protocols/radius/__load__.zeek
+%%DATADIR%%/base/protocols/radius/consts.zeek
+%%DATADIR%%/base/protocols/radius/main.zeek
+%%DATADIR%%/base/protocols/rdp/__load__.zeek
+%%DATADIR%%/base/protocols/rdp/consts.zeek
%%DATADIR%%/base/protocols/rdp/dpd.sig
-%%DATADIR%%/base/protocols/rdp/main.bro
-%%DATADIR%%/base/protocols/rfb/__load__.bro
+%%DATADIR%%/base/protocols/rdp/main.zeek
+%%DATADIR%%/base/protocols/rfb/__load__.zeek
%%DATADIR%%/base/protocols/rfb/dpd.sig
-%%DATADIR%%/base/protocols/rfb/main.bro
-%%DATADIR%%/base/protocols/sip/__load__.bro
+%%DATADIR%%/base/protocols/rfb/main.zeek
+%%DATADIR%%/base/protocols/sip/__load__.zeek
%%DATADIR%%/base/protocols/sip/dpd.sig
-%%DATADIR%%/base/protocols/sip/main.bro
-%%DATADIR%%/base/protocols/smb/__load__.bro
-%%DATADIR%%/base/protocols/smb/const-dos-error.bro
-%%DATADIR%%/base/protocols/smb/const-nt-status.bro
-%%DATADIR%%/base/protocols/smb/consts.bro
+%%DATADIR%%/base/protocols/sip/main.zeek
+%%DATADIR%%/base/protocols/smb/__load__.zeek
+%%DATADIR%%/base/protocols/smb/const-dos-error.zeek
+%%DATADIR%%/base/protocols/smb/const-nt-status.zeek
+%%DATADIR%%/base/protocols/smb/consts.zeek
%%DATADIR%%/base/protocols/smb/dpd.sig
-%%DATADIR%%/base/protocols/smb/files.bro
-%%DATADIR%%/base/protocols/smb/main.bro
-%%DATADIR%%/base/protocols/smb/smb1-main.bro
-%%DATADIR%%/base/protocols/smb/smb2-main.bro
-%%DATADIR%%/base/protocols/smtp/__load__.bro
+%%DATADIR%%/base/protocols/smb/files.zeek
+%%DATADIR%%/base/protocols/smb/main.zeek
+%%DATADIR%%/base/protocols/smb/smb1-main.zeek
+%%DATADIR%%/base/protocols/smb/smb2-main.zeek
+%%DATADIR%%/base/protocols/smtp/__load__.zeek
%%DATADIR%%/base/protocols/smtp/dpd.sig
-%%DATADIR%%/base/protocols/smtp/entities.bro
-%%DATADIR%%/base/protocols/smtp/files.bro
-%%DATADIR%%/base/protocols/smtp/main.bro
-%%DATADIR%%/base/protocols/snmp/__load__.bro
-%%DATADIR%%/base/protocols/snmp/main.bro
-%%DATADIR%%/base/protocols/socks/__load__.bro
-%%DATADIR%%/base/protocols/socks/consts.bro
+%%DATADIR%%/base/protocols/smtp/entities.zeek
+%%DATADIR%%/base/protocols/smtp/files.zeek
+%%DATADIR%%/base/protocols/smtp/main.zeek
+%%DATADIR%%/base/protocols/snmp/__load__.zeek
+%%DATADIR%%/base/protocols/snmp/main.zeek
+%%DATADIR%%/base/protocols/socks/__load__.zeek
+%%DATADIR%%/base/protocols/socks/consts.zeek
%%DATADIR%%/base/protocols/socks/dpd.sig
-%%DATADIR%%/base/protocols/socks/main.bro
-%%DATADIR%%/base/protocols/ssh/__load__.bro
+%%DATADIR%%/base/protocols/socks/main.zeek
+%%DATADIR%%/base/protocols/ssh/__load__.zeek
%%DATADIR%%/base/protocols/ssh/dpd.sig
-%%DATADIR%%/base/protocols/ssh/main.bro
-%%DATADIR%%/base/protocols/ssl/__load__.bro
-%%DATADIR%%/base/protocols/ssl/consts.bro
-%%DATADIR%%/base/protocols/ssl/ct-list.bro
+%%DATADIR%%/base/protocols/ssh/main.zeek
+%%DATADIR%%/base/protocols/ssl/__load__.zeek
+%%DATADIR%%/base/protocols/ssl/consts.zeek
+%%DATADIR%%/base/protocols/ssl/ct-list.zeek
%%DATADIR%%/base/protocols/ssl/dpd.sig
-%%DATADIR%%/base/protocols/ssl/files.bro
-%%DATADIR%%/base/protocols/ssl/main.bro
-%%DATADIR%%/base/protocols/ssl/mozilla-ca-list.bro
-%%DATADIR%%/base/protocols/syslog/__load__.bro
-%%DATADIR%%/base/protocols/syslog/consts.bro
-%%DATADIR%%/base/protocols/syslog/main.bro
-%%DATADIR%%/base/protocols/tunnels/__load__.bro
+%%DATADIR%%/base/protocols/ssl/files.zeek
+%%DATADIR%%/base/protocols/ssl/main.zeek
+%%DATADIR%%/base/protocols/ssl/mozilla-ca-list.zeek
+%%DATADIR%%/base/protocols/syslog/__load__.zeek
+%%DATADIR%%/base/protocols/syslog/consts.zeek
+%%DATADIR%%/base/protocols/syslog/main.zeek
+%%DATADIR%%/base/protocols/tunnels/__load__.zeek
%%DATADIR%%/base/protocols/tunnels/dpd.sig
-%%DATADIR%%/base/protocols/xmpp/__load__.bro
+%%DATADIR%%/base/protocols/xmpp/__load__.zeek
%%DATADIR%%/base/protocols/xmpp/dpd.sig
-%%DATADIR%%/base/protocols/xmpp/main.bro
-%%DATADIR%%/base/utils/active-http.bro
-%%DATADIR%%/base/utils/addrs.bro
-%%DATADIR%%/base/utils/conn-ids.bro
-%%DATADIR%%/base/utils/dir.bro
-%%DATADIR%%/base/utils/directions-and-hosts.bro
-%%DATADIR%%/base/utils/email.bro
-%%DATADIR%%/base/utils/exec.bro
-%%DATADIR%%/base/utils/files.bro
-%%DATADIR%%/base/utils/geoip-distance.bro
-%%DATADIR%%/base/utils/hash_hrw.bro
-%%DATADIR%%/base/utils/json.bro
-%%DATADIR%%/base/utils/numbers.bro
-%%DATADIR%%/base/utils/paths.bro
-%%DATADIR%%/base/utils/patterns.bro
-%%DATADIR%%/base/utils/queue.bro
-%%DATADIR%%/base/utils/site.bro
-%%DATADIR%%/base/utils/strings.bro
-%%DATADIR%%/base/utils/thresholds.bro
-%%DATADIR%%/base/utils/time.bro
-%%DATADIR%%/base/utils/urls.bro
-%%BROCTL%%%%DATADIR%%/broctl/__load__.bro
-%%BROCTL%%%%DATADIR%%/broctl/auto.bro
-%%BROCTL%%%%DATADIR%%/broctl/check.bro
-%%BROCTL%%%%DATADIR%%/broctl/main.bro
-%%BROCTL%%%%DATADIR%%/broctl/process-trace.bro
-%%BROCTL%%%%DATADIR%%/broctl/standalone.bro
-%%DATADIR%%/broxygen/__load__.bro
-%%DATADIR%%/broxygen/example.bro
-%%DATADIR%%/policy/files/x509/log-ocsp.bro
-%%DATADIR%%/policy/frameworks/control/controllee.bro
-%%DATADIR%%/policy/frameworks/control/controller.bro
-%%DATADIR%%/policy/frameworks/dpd/detect-protocols.bro
-%%DATADIR%%/policy/frameworks/dpd/packet-segment-logging.bro
-%%DATADIR%%/policy/frameworks/files/detect-MHR.bro
-%%DATADIR%%/policy/frameworks/files/entropy-test-all-files.bro
-%%DATADIR%%/policy/frameworks/files/extract-all-files.bro
-%%DATADIR%%/policy/frameworks/files/hash-all-files.bro
-%%DATADIR%%/policy/frameworks/intel/do_expire.bro
-%%DATADIR%%/policy/frameworks/intel/do_notice.bro
-%%DATADIR%%/policy/frameworks/intel/seen/__load__.bro
-%%DATADIR%%/policy/frameworks/intel/seen/conn-established.bro
-%%DATADIR%%/policy/frameworks/intel/seen/dns.bro
-%%DATADIR%%/policy/frameworks/intel/seen/file-hashes.bro
-%%DATADIR%%/policy/frameworks/intel/seen/file-names.bro
-%%DATADIR%%/policy/frameworks/intel/seen/http-headers.bro
-%%DATADIR%%/policy/frameworks/intel/seen/http-url.bro
-%%DATADIR%%/policy/frameworks/intel/seen/pubkey-hashes.bro
-%%DATADIR%%/policy/frameworks/intel/seen/smtp-url-extraction.bro
-%%DATADIR%%/policy/frameworks/intel/seen/smtp.bro
-%%DATADIR%%/policy/frameworks/intel/seen/ssl.bro
-%%DATADIR%%/policy/frameworks/intel/seen/where-locations.bro
-%%DATADIR%%/policy/frameworks/intel/seen/x509.bro
-%%DATADIR%%/policy/frameworks/intel/whitelist.bro
-%%DATADIR%%/policy/frameworks/notice/__load__.bro
-%%DATADIR%%/policy/frameworks/notice/extend-email/hostnames.bro
-%%DATADIR%%/policy/frameworks/packet-filter/shunt.bro
+%%DATADIR%%/base/protocols/xmpp/main.zeek
+%%DATADIR%%/base/utils/active-http.zeek
+%%DATADIR%%/base/utils/addrs.zeek
+%%DATADIR%%/base/utils/conn-ids.zeek
+%%DATADIR%%/base/utils/dir.zeek
+%%DATADIR%%/base/utils/directions-and-hosts.zeek
+%%DATADIR%%/base/utils/email.zeek
+%%DATADIR%%/base/utils/exec.zeek
+%%DATADIR%%/base/utils/files.zeek
+%%DATADIR%%/base/utils/geoip-distance.zeek
+%%DATADIR%%/base/utils/hash_hrw.zeek
+%%DATADIR%%/base/utils/json.zeek
+%%DATADIR%%/base/utils/numbers.zeek
+%%DATADIR%%/base/utils/paths.zeek
+%%DATADIR%%/base/utils/patterns.zeek
+%%DATADIR%%/base/utils/queue.zeek
+%%DATADIR%%/base/utils/site.zeek
+%%DATADIR%%/base/utils/strings.zeek
+%%DATADIR%%/base/utils/thresholds.zeek
+%%DATADIR%%/base/utils/time.zeek
+%%DATADIR%%/base/utils/urls.zeek
+%%DATADIR%%/policy/files/unified2/__load__.zeek
+%%DATADIR%%/policy/files/unified2/main.zeek
+%%DATADIR%%/policy/files/x509/log-ocsp.zeek
+%%DATADIR%%/policy/frameworks/control/controllee.zeek
+%%DATADIR%%/policy/frameworks/control/controller.zeek
+%%DATADIR%%/policy/frameworks/dpd/detect-protocols.zeek
+%%DATADIR%%/policy/frameworks/dpd/packet-segment-logging.zeek
+%%DATADIR%%/policy/frameworks/files/detect-MHR.zeek
+%%DATADIR%%/policy/frameworks/files/entropy-test-all-files.zeek
+%%DATADIR%%/policy/frameworks/files/extract-all-files.zeek
+%%DATADIR%%/policy/frameworks/files/hash-all-files.zeek
+%%DATADIR%%/policy/frameworks/intel/do_expire.zeek
+%%DATADIR%%/policy/frameworks/intel/do_notice.zeek
+%%DATADIR%%/policy/frameworks/intel/removal.zeek
+%%DATADIR%%/policy/frameworks/intel/seen/__load__.zeek
+%%DATADIR%%/policy/frameworks/intel/seen/conn-established.zeek
+%%DATADIR%%/policy/frameworks/intel/seen/dns.zeek
+%%DATADIR%%/policy/frameworks/intel/seen/file-hashes.zeek
+%%DATADIR%%/policy/frameworks/intel/seen/file-names.zeek
+%%DATADIR%%/policy/frameworks/intel/seen/http-headers.zeek
+%%DATADIR%%/policy/frameworks/intel/seen/http-url.zeek
+%%DATADIR%%/policy/frameworks/intel/seen/pubkey-hashes.zeek
+%%DATADIR%%/policy/frameworks/intel/seen/smb-filenames.zeek
+%%DATADIR%%/policy/frameworks/intel/seen/smtp-url-extraction.zeek
+%%DATADIR%%/policy/frameworks/intel/seen/smtp.zeek
+%%DATADIR%%/policy/frameworks/intel/seen/ssl.zeek
+%%DATADIR%%/policy/frameworks/intel/seen/where-locations.zeek
+%%DATADIR%%/policy/frameworks/intel/seen/x509.zeek
+%%DATADIR%%/policy/frameworks/intel/whitelist.zeek
+%%DATADIR%%/policy/frameworks/netcontrol/catch-and-release.zeek
+%%DATADIR%%/policy/frameworks/notice/__load__.zeek
+%%DATADIR%%/policy/frameworks/notice/actions/drop.zeek
+%%DATADIR%%/policy/frameworks/notice/extend-email/hostnames.zeek
+%%DATADIR%%/policy/frameworks/packet-filter/shunt.zeek
%%DATADIR%%/policy/frameworks/signatures/detect-windows-shells.sig
-%%DATADIR%%/policy/frameworks/software/version-changes.bro
-%%DATADIR%%/policy/frameworks/software/vulnerable.bro
-%%DATADIR%%/policy/frameworks/software/windows-version-detection.bro
-%%DATADIR%%/policy/integration/barnyard2/__load__.bro
-%%DATADIR%%/policy/integration/barnyard2/main.bro
-%%DATADIR%%/policy/integration/barnyard2/types.bro
-%%DATADIR%%/policy/integration/collective-intel/__load__.bro
-%%DATADIR%%/policy/integration/collective-intel/main.bro
-%%DATADIR%%/policy/misc/capture-loss.bro
-%%DATADIR%%/policy/misc/detect-traceroute/__load__.bro
+%%DATADIR%%/policy/frameworks/software/version-changes.zeek
+%%DATADIR%%/policy/frameworks/software/vulnerable.zeek
+%%DATADIR%%/policy/frameworks/software/windows-version-detection.zeek
+%%DATADIR%%/policy/integration/barnyard2/__load__.zeek
+%%DATADIR%%/policy/integration/barnyard2/main.zeek
+%%DATADIR%%/policy/integration/barnyard2/types.zeek
+%%DATADIR%%/policy/integration/collective-intel/__load__.zeek
+%%DATADIR%%/policy/integration/collective-intel/main.zeek
+%%DATADIR%%/policy/misc/capture-loss.zeek
+%%DATADIR%%/policy/misc/detect-traceroute/__load__.zeek
%%DATADIR%%/policy/misc/detect-traceroute/detect-low-ttls.sig
-%%DATADIR%%/policy/misc/detect-traceroute/main.bro
-%%DATADIR%%/policy/misc/dump-events.bro
-%%DATADIR%%/policy/misc/load-balancing.bro
-%%DATADIR%%/policy/misc/loaded-scripts.bro
-%%DATADIR%%/policy/misc/profiling.bro
-%%DATADIR%%/policy/misc/scan.bro
-%%DATADIR%%/policy/misc/stats.bro
-%%DATADIR%%/policy/misc/trim-trace-file.bro
-%%DATADIR%%/policy/misc/weird-stats.bro
-%%DATADIR%%/policy/protocols/conn/known-hosts.bro
-%%DATADIR%%/policy/protocols/conn/known-services.bro
-%%DATADIR%%/policy/protocols/conn/mac-logging.bro
-%%DATADIR%%/policy/protocols/conn/vlan-logging.bro
-%%DATADIR%%/policy/protocols/conn/weirds.bro
-%%DATADIR%%/policy/protocols/dhcp/deprecated_events.bro
-%%DATADIR%%/policy/protocols/dhcp/msg-orig.bro
-%%DATADIR%%/policy/protocols/dhcp/software.bro
-%%DATADIR%%/policy/protocols/dhcp/sub-opts.bro
-%%DATADIR%%/policy/protocols/dns/auth-addl.bro
-%%DATADIR%%/policy/protocols/dns/detect-external-names.bro
-%%DATADIR%%/policy/protocols/ftp/detect-bruteforcing.bro
-%%DATADIR%%/policy/protocols/ftp/detect.bro
-%%DATADIR%%/policy/protocols/ftp/software.bro
-%%DATADIR%%/policy/protocols/http/detect-sqli.bro
-%%DATADIR%%/policy/protocols/http/detect-webapps.bro
+%%DATADIR%%/policy/misc/detect-traceroute/main.zeek
+%%DATADIR%%/policy/misc/dump-events.zeek
+%%DATADIR%%/policy/misc/load-balancing.zeek
+%%DATADIR%%/policy/misc/loaded-scripts.zeek
+%%DATADIR%%/policy/misc/profiling.zeek
+%%DATADIR%%/policy/misc/scan.zeek
+%%DATADIR%%/policy/misc/stats.zeek
+%%DATADIR%%/policy/misc/trim-trace-file.zeek
+%%DATADIR%%/policy/misc/weird-stats.zeek
+%%DATADIR%%/policy/protocols/conn/known-hosts.zeek
+%%DATADIR%%/policy/protocols/conn/known-services.zeek
+%%DATADIR%%/policy/protocols/conn/mac-logging.zeek
+%%DATADIR%%/policy/protocols/conn/vlan-logging.zeek
+%%DATADIR%%/policy/protocols/conn/weirds.zeek
+%%DATADIR%%/policy/protocols/dhcp/msg-orig.zeek
+%%DATADIR%%/policy/protocols/dhcp/software.zeek
+%%DATADIR%%/policy/protocols/dhcp/sub-opts.zeek
+%%DATADIR%%/policy/protocols/dns/auth-addl.zeek
+%%DATADIR%%/policy/protocols/dns/detect-external-names.zeek
+%%DATADIR%%/policy/protocols/ftp/detect-bruteforcing.zeek
+%%DATADIR%%/policy/protocols/ftp/detect.zeek
+%%DATADIR%%/policy/protocols/ftp/software.zeek
+%%DATADIR%%/policy/protocols/http/detect-sqli.zeek
%%DATADIR%%/policy/protocols/http/detect-webapps.sig
-%%DATADIR%%/policy/protocols/http/header-names.bro
-%%DATADIR%%/policy/protocols/http/software-browser-plugins.bro
-%%DATADIR%%/policy/protocols/http/software.bro
-%%DATADIR%%/policy/protocols/http/var-extraction-cookies.bro
-%%DATADIR%%/policy/protocols/http/var-extraction-uri.bro
-%%DATADIR%%/policy/protocols/krb/ticket-logging.bro
-%%DATADIR%%/policy/protocols/modbus/known-masters-slaves.bro
-%%DATADIR%%/policy/protocols/modbus/track-memmap.bro
-%%DATADIR%%/policy/protocols/mysql/software.bro
-%%DATADIR%%/policy/protocols/rdp/indicate_ssl.bro
-%%DATADIR%%/policy/protocols/smb/__load__.bro
-%%DATADIR%%/policy/protocols/smb/log-cmds.bro
-%%DATADIR%%/policy/protocols/smtp/blocklists.bro
-%%DATADIR%%/policy/protocols/smtp/detect-suspicious-orig.bro
-%%DATADIR%%/policy/protocols/smtp/entities-excerpt.bro
-%%DATADIR%%/policy/protocols/smtp/software.bro
-%%DATADIR%%/policy/protocols/ssh/detect-bruteforcing.bro
-%%DATADIR%%/policy/protocols/ssh/geo-data.bro
-%%DATADIR%%/policy/protocols/ssh/interesting-hostnames.bro
-%%DATADIR%%/policy/protocols/ssh/software.bro
-%%DATADIR%%/policy/protocols/ssl/expiring-certs.bro
-%%DATADIR%%/policy/protocols/ssl/extract-certs-pem.bro
-%%DATADIR%%/policy/protocols/ssl/heartbleed.bro
-%%DATADIR%%/policy/protocols/ssl/known-certs.bro
-%%DATADIR%%/policy/protocols/ssl/log-hostcerts-only.bro
-%%DATADIR%%/policy/protocols/ssl/notary.bro
-%%DATADIR%%/policy/protocols/ssl/validate-certs.bro
-%%DATADIR%%/policy/protocols/ssl/validate-ocsp.bro
-%%DATADIR%%/policy/protocols/ssl/validate-sct.bro
-%%DATADIR%%/policy/protocols/ssl/weak-keys.bro
-%%DATADIR%%/policy/tuning/__load__.bro
-%%DATADIR%%/policy/tuning/defaults/__load__.bro
-%%DATADIR%%/policy/tuning/defaults/extracted_file_limits.bro
-%%DATADIR%%/policy/tuning/defaults/packet-fragments.bro
-%%DATADIR%%/policy/tuning/defaults/warnings.bro
-%%DATADIR%%/policy/tuning/json-logs.bro
-%%DATADIR%%/policy/tuning/track-all-assets.bro
-%%DATADIR%%/site/local.bro
-%%BROCTL%%%%DATADIR%%ctl/scripts/archive-log
-%%BROCTL%%%%DATADIR%%ctl/scripts/broctl-config.sh
-%%BROCTL%%%%DATADIR%%ctl/scripts/check-config
-%%BROCTL%%%%DATADIR%%ctl/scripts/crash-diag
-%%BROCTL%%%%DATADIR%%ctl/scripts/delete-log
-%%BROCTL%%%%DATADIR%%ctl/scripts/expire-crash
-%%BROCTL%%%%DATADIR%%ctl/scripts/expire-logs
-%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/check-pid
-%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/df
-%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/first-line
-%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/start
-%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/stop
-%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/to-bytes.awk
-%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/top
-%%BROCTL%%%%DATADIR%%ctl/scripts/make-archive-name
-%%BROCTL%%%%DATADIR%%ctl/scripts/post-terminate
-%%BROCTL%%%%DATADIR%%ctl/scripts/postprocessors/summarize-connections
-%%BROCTL%%%%DATADIR%%ctl/scripts/run-bro
-%%BROCTL%%%%DATADIR%%ctl/scripts/run-bro-on-trace
-%%BROCTL%%%%DATADIR%%ctl/scripts/send-mail
-%%BROCTL%%%%DATADIR%%ctl/scripts/set-bro-path
-%%BROCTL%%%%DATADIR%%ctl/scripts/stats-to-csv
-%%BROCTL%%%%DATADIR%%ctl/scripts/update
-%%BROCTL%%spool/broctl-config.sh
-%%BROCTL%%@preunexec rm -f %D/logs/current
-%%BROCTL%%@preunexec rm -f %D/spool/broctl.dat
-%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/broctl-config.bro
-%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/local-networks.bro
-%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/standalone-layout.bro
-%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-logger.bro
-%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-manager.bro
-%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-proxy.bro
-%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-worker.bro
-%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local.bro
-%%BROCTL%%@preunexec rm -f %D/spool/state.db
-%%BROCTL%%@dir spool/tmp
-%%BROCTL%%@dir spool/installed-scripts-do-not-touch/site
-%%BROCTL%%@dir spool/installed-scripts-do-not-touch/auto
-%%BROCTL%%@dir spool/installed-scripts-do-not-touch
-%%BROCTL%%@dir spool
-%%BROCTL%%@dir %%DATADIR%%ctl/scripts/postprocessors
-%%BROCTL%%@dir %%DATADIR%%ctl/scripts/helpers
-%%BROCTL%%@dir %%DATADIR%%ctl/scripts
-%%BROCTL%%@dir %%DATADIR%%ctl
+%%DATADIR%%/policy/protocols/http/detect-webapps.zeek
+%%DATADIR%%/policy/protocols/http/header-names.zeek
+%%DATADIR%%/policy/protocols/http/software-browser-plugins.zeek
+%%DATADIR%%/policy/protocols/http/software.zeek
+%%DATADIR%%/policy/protocols/http/var-extraction-cookies.zeek
+%%DATADIR%%/policy/protocols/http/var-extraction-uri.zeek
+%%DATADIR%%/policy/protocols/krb/ticket-logging.zeek
+%%DATADIR%%/policy/protocols/modbus/known-masters-slaves.zeek
+%%DATADIR%%/policy/protocols/modbus/track-memmap.zeek
+%%DATADIR%%/policy/protocols/mqtt/__load__.zeek
+%%DATADIR%%/policy/protocols/mqtt/dpd.sig
+%%DATADIR%%/policy/protocols/mqtt/main.zeek
+%%DATADIR%%/policy/protocols/mysql/software.zeek
+%%DATADIR%%/policy/protocols/rdp/indicate_ssl.zeek
+%%DATADIR%%/policy/protocols/smb/log-cmds.zeek
+%%DATADIR%%/policy/protocols/smtp/blocklists.zeek
+%%DATADIR%%/policy/protocols/smtp/detect-suspicious-orig.zeek
+%%DATADIR%%/policy/protocols/smtp/entities-excerpt.zeek
+%%DATADIR%%/policy/protocols/smtp/software.zeek
+%%DATADIR%%/policy/protocols/ssh/detect-bruteforcing.zeek
+%%DATADIR%%/policy/protocols/ssh/geo-data.zeek
+%%DATADIR%%/policy/protocols/ssh/interesting-hostnames.zeek
+%%DATADIR%%/policy/protocols/ssh/software.zeek
+%%DATADIR%%/policy/protocols/ssl/expiring-certs.zeek
+%%DATADIR%%/policy/protocols/ssl/extract-certs-pem.zeek
+%%DATADIR%%/policy/protocols/ssl/heartbleed.zeek
+%%DATADIR%%/policy/protocols/ssl/known-certs.zeek
+%%DATADIR%%/policy/protocols/ssl/log-hostcerts-only.zeek
+%%DATADIR%%/policy/protocols/ssl/notary.zeek
+%%DATADIR%%/policy/protocols/ssl/validate-certs.zeek
+%%DATADIR%%/policy/protocols/ssl/validate-ocsp.zeek
+%%DATADIR%%/policy/protocols/ssl/validate-sct.zeek
+%%DATADIR%%/policy/protocols/ssl/weak-keys.zeek
+%%DATADIR%%/policy/tuning/__load__.zeek
+%%DATADIR%%/policy/tuning/defaults/__load__.zeek
+%%DATADIR%%/policy/tuning/defaults/extracted_file_limits.zeek
+%%DATADIR%%/policy/tuning/defaults/packet-fragments.zeek
+%%DATADIR%%/policy/tuning/defaults/warnings.zeek
+%%DATADIR%%/policy/tuning/json-logs.zeek
+%%DATADIR%%/policy/tuning/track-all-assets.zeek
+%%DATADIR%%/site/local.zeek
+%%ZEEKCTL%%%%DATADIR%%/zeekctl/__load__.zeek
+%%ZEEKCTL%%%%DATADIR%%/zeekctl/auto.zeek
+%%ZEEKCTL%%%%DATADIR%%/zeekctl/check.zeek
+%%ZEEKCTL%%%%DATADIR%%/zeekctl/main.zeek
+%%ZEEKCTL%%%%DATADIR%%/zeekctl/process-trace.zeek
+%%ZEEKCTL%%%%DATADIR%%/zeekctl/standalone.zeek
+%%DATADIR%%/zeekygen/__load__.zeek
+%%DATADIR%%/zeekygen/example.zeek
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/archive-log
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/check-config
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/crash-diag
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/delete-log
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/expire-crash
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/expire-logs
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/helpers/check-pid
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/helpers/df
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/helpers/first-line
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/helpers/start
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/helpers/stop
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/helpers/to-bytes.awk
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/helpers/top
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/make-archive-name
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/post-terminate
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/postprocessors/summarize-connections
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/run-zeek
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/run-zeek-on-trace
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/send-mail
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/set-zeek-path
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/stats-to-csv
+%%ZEEKCTL%%%%DATADIR%%ctl/scripts/zeekctl-config.sh
+%%ZEEKCTL%%spool/zeekctl-config.sh
+%%ZEEKCTL%%@preunexec rm -f %D/logs/current
+%%ZEEKCTL%%@preunexec rm -f %D/spool/zeekctl.dat
+%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/zeekctl-config.bro
+%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/local-networks.bro
+%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/standalone-layout.bro
+%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-logger.bro
+%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-manager.bro
+%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-proxy.bro
+%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-worker.bro
+%%ZEEKCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local.bro
+%%ZEEKCTL%%@preunexec rm -f %D/spool/state.db
+%%ZEEKCTL%%@dir spool/tmp
+%%ZEEKCTL%%@dir spool/installed-scripts-do-not-touch/site
+%%ZEEKCTL%%@dir spool/installed-scripts-do-not-touch/auto
+%%ZEEKCTL%%@dir spool/installed-scripts-do-not-touch
+%%ZEEKCTL%%@dir spool
+%%ZEEKCTL%%@dir %%DATADIR%%ctl/scripts/postprocessors
+%%ZEEKCTL%%@dir %%DATADIR%%ctl/scripts/helpers
+%%ZEEKCTL%%@dir %%DATADIR%%ctl/scripts
+%%ZEEKCTL%%@dir %%DATADIR%%ctl
+@dir %%DATADIR%%/zeekygen
+%%ZEEKCTL%%@dir %%DATADIR%%/zeekctl
@dir %%DATADIR%%/site
@dir %%DATADIR%%/policy/tuning/defaults
@dir %%DATADIR%%/policy/tuning
@@ -1722,6 +1781,7 @@
@dir %%DATADIR%%/policy/protocols/smb
@dir %%DATADIR%%/policy/protocols/rdp
@dir %%DATADIR%%/policy/protocols/mysql
+@dir %%DATADIR%%/policy/protocols/mqtt
@dir %%DATADIR%%/policy/protocols/modbus
@dir %%DATADIR%%/policy/protocols/krb
@dir %%DATADIR%%/policy/protocols/http
@@ -1739,7 +1799,9 @@
@dir %%DATADIR%%/policy/frameworks/signatures
@dir %%DATADIR%%/policy/frameworks/packet-filter
@dir %%DATADIR%%/policy/frameworks/notice/extend-email
+@dir %%DATADIR%%/policy/frameworks/notice/actions
@dir %%DATADIR%%/policy/frameworks/notice
+@dir %%DATADIR%%/policy/frameworks/netcontrol
@dir %%DATADIR%%/policy/frameworks/intel/seen
@dir %%DATADIR%%/policy/frameworks/intel
@dir %%DATADIR%%/policy/frameworks/files
@@ -1747,10 +1809,9 @@
@dir %%DATADIR%%/policy/frameworks/control
@dir %%DATADIR%%/policy/frameworks
@dir %%DATADIR%%/policy/files/x509
+@dir %%DATADIR%%/policy/files/unified2
@dir %%DATADIR%%/policy/files
@dir %%DATADIR%%/policy
-@dir %%DATADIR%%/broxygen
-%%BROCTL%%@dir %%DATADIR%%/broctl
@dir %%DATADIR%%/base/utils
@dir %%DATADIR%%/base/protocols/xmpp
@dir %%DATADIR%%/base/protocols/tunnels
@@ -1766,8 +1827,10 @@
@dir %%DATADIR%%/base/protocols/rdp
@dir %%DATADIR%%/base/protocols/radius
@dir %%DATADIR%%/base/protocols/pop3
+@dir %%DATADIR%%/base/protocols/ntp
@dir %%DATADIR%%/base/protocols/ntlm
@dir %%DATADIR%%/base/protocols/mysql
+@dir %%DATADIR%%/base/protocols/mqtt
@dir %%DATADIR%%/base/protocols/modbus
@dir %%DATADIR%%/base/protocols/krb
@dir %%DATADIR%%/base/protocols/irc
@@ -1811,7 +1874,6 @@
@dir %%DATADIR%%/base/frameworks/analyzer
@dir %%DATADIR%%/base/frameworks
@dir %%DATADIR%%/base/files/x509
-@dir %%DATADIR%%/base/files/unified2
@dir %%DATADIR%%/base/files/pe
@dir %%DATADIR%%/base/files/hash
@dir %%DATADIR%%/base/files/extract
@@ -1820,14 +1882,15 @@
@dir %%DATADIR%%/base/bif
@dir %%DATADIR%%/base
@dir %%DATADIR%%
-%%BROCTL%%@dir logs
-%%BROCTL%%@dir lib/broctl/plugins
-%%BROCTL%%@dir lib/broctl/broker
-%%BROCTL%%@dir lib/broctl/BroControl
-%%BROCTL%%@dir lib/broctl
-%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap/scripts
-%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap/lib
-%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap/broctl
-%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap
-@dir lib/bro/plugins
-%%BROCTL%%@postexec su -fm %%BROUSER%% -c '%D/bin/broctl install; rm -f %D/spool/debug.log'
+%%ZEEKCTL%%@dir logs
+%%ZEEKCTL%%@dir lib/zeekctl/plugins
+%%ZEEKCTL%%@dir lib/zeekctl/broker
+%%ZEEKCTL%%@dir lib/zeekctl/ZeekControl
+%%ZEEKCTL%%@dir lib/zeekctl/BroControl
+%%ZEEKCTL%%@dir lib/zeekctl
+%%NETMAP%%@dir lib/zeek/plugins/Bro_Netmap/scripts
+%%NETMAP%%@dir lib/zeek/plugins/Bro_Netmap/lib
+%%NETMAP%%@dir lib/zeek/plugins/Bro_Netmap/broctl
+%%NETMAP%%@dir lib/zeek/plugins/Bro_Netmap
+@dir lib/zeek/plugins
+%%ZEEKCTL%%@postexec su -fm %%ZEEKUSER%% -c '%D/bin/zeekctl install; rm -f %D/spool/debug.log'

File Metadata

Mime Type
text/plain
Expires
Sat, Jun 20, 3:17 PM (14 h, 58 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
34120388
Default Alt Text
D22376.id64358.diff (131 KB)

Event Timeline