From ec976c7fc5a21b0573417fe65c2ebbb1770335e5 Mon Sep 17 00:00:00 2001 From: Tim Wojtulewicz Date: Thu, 23 Jan 2025 12:29:42 -0700 Subject: [PATCH] Regenerate docs after formatting changes to init-bare --- .../autogenerated-file-analyzer-index.rst | 10 +- .../autogenerated-protocol-analyzer-index.rst | 218 ++-- .../autogenerated-script-index.rst | 2 +- scripts/base/bif/event.bif.zeek.rst | 2 +- scripts/base/bif/index.rst | 14 +- scripts/base/init-bare.zeek.rst | 1122 +++++++++-------- .../policy/frameworks/telemetry/log.zeek.rst | 4 +- 7 files changed, 698 insertions(+), 674 deletions(-) diff --git a/script-reference/autogenerated-file-analyzer-index.rst b/script-reference/autogenerated-file-analyzer-index.rst index 47b2ab15a..11e3d6f45 100644 --- a/script-reference/autogenerated-file-analyzer-index.rst +++ b/script-reference/autogenerated-file-analyzer-index.rst @@ -280,7 +280,7 @@ Types +++++ .. zeek:type:: X509::Certificate - :source-code: base/init-bare.zeek 4669 4684 + :source-code: base/init-bare.zeek 4939 4954 :Type: :zeek:type:`record` @@ -328,7 +328,7 @@ Types .. zeek:type:: X509::Extension - :source-code: base/init-bare.zeek 4686 4692 + :source-code: base/init-bare.zeek 4956 4962 :Type: :zeek:type:`record` @@ -349,7 +349,7 @@ Types .. zeek:type:: X509::BasicConstraints - :source-code: base/init-bare.zeek 4694 4697 + :source-code: base/init-bare.zeek 4964 4967 :Type: :zeek:type:`record` @@ -362,7 +362,7 @@ Types .. zeek:type:: X509::SubjectAlternativeName - :source-code: base/init-bare.zeek 4699 4705 + :source-code: base/init-bare.zeek 4969 4975 :Type: :zeek:type:`record` @@ -383,7 +383,7 @@ Types .. zeek:type:: X509::Result - :source-code: base/init-bare.zeek 4708 4715 + :source-code: base/init-bare.zeek 4978 4985 :Type: :zeek:type:`record` diff --git a/script-reference/autogenerated-protocol-analyzer-index.rst b/script-reference/autogenerated-protocol-analyzer-index.rst index 9b819b549..05147bff8 100644 --- a/script-reference/autogenerated-protocol-analyzer-index.rst +++ b/script-reference/autogenerated-protocol-analyzer-index.rst @@ -929,7 +929,7 @@ Options/Constants +++++++++++++++++ .. zeek:id:: DCE_RPC::max_cmd_reassembly - :source-code: base/init-bare.zeek 5494 5494 + :source-code: base/init-bare.zeek 5553 5553 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -940,7 +940,7 @@ Options/Constants a weird and skip further input. .. zeek:id:: DCE_RPC::max_frag_data - :source-code: base/init-bare.zeek 5499 5499 + :source-code: base/init-bare.zeek 5558 5558 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1281,7 +1281,7 @@ Types +++++ .. zeek:type:: DHCP::Msg - :source-code: base/init-bare.zeek 3908 3923 + :source-code: base/init-bare.zeek 4609 4624 :Type: :zeek:type:`record` @@ -1326,7 +1326,7 @@ Types .. zeek:see:: dhcp_message .. zeek:type:: DHCP::Addrs - :source-code: base/init-bare.zeek 3903 3903 + :source-code: base/init-bare.zeek 4604 4604 :Type: :zeek:type:`vector` of :zeek:type:`addr` @@ -1336,7 +1336,7 @@ Types .. zeek:see:: dhcp_message .. zeek:type:: DHCP::SubOpt - :source-code: base/init-bare.zeek 3949 3952 + :source-code: base/init-bare.zeek 4650 4653 :Type: :zeek:type:`record` @@ -1349,13 +1349,13 @@ Types .. zeek:see:: dhcp_message .. zeek:type:: DHCP::SubOpts - :source-code: base/init-bare.zeek 3954 3954 + :source-code: base/init-bare.zeek 4655 4655 :Type: :zeek:type:`vector` of :zeek:type:`DHCP::SubOpt` .. zeek:type:: DHCP::ClientFQDN - :source-code: base/init-bare.zeek 3934 3944 + :source-code: base/init-bare.zeek 4635 4645 :Type: :zeek:type:`record` @@ -1375,7 +1375,7 @@ Types DHCP Client FQDN Option information (Option 81) .. zeek:type:: DHCP::ClientID - :source-code: base/init-bare.zeek 3928 3931 + :source-code: base/init-bare.zeek 4629 4632 :Type: :zeek:type:`record` @@ -1388,7 +1388,7 @@ Types .. zeek:see:: dhcp_message .. zeek:type:: DHCP::Options - :source-code: base/init-bare.zeek 3956 4054 + :source-code: base/init-bare.zeek 4657 4755 :Type: :zeek:type:`record` @@ -5393,7 +5393,7 @@ Options/Constants +++++++++++++++++ .. zeek:id:: KRB::keytab - :source-code: base/init-bare.zeek 4985 4985 + :source-code: base/init-bare.zeek 5259 5259 :Type: :zeek:type:`string` :Attributes: :zeek:attr:`&redef` @@ -5405,7 +5405,7 @@ Types +++++ .. zeek:type:: KRB::Error_Msg - :source-code: base/init-bare.zeek 5071 5094 + :source-code: base/init-bare.zeek 5345 5368 :Type: :zeek:type:`record` @@ -5445,7 +5445,7 @@ Types The data from the ERROR_MSG message. See :rfc:`4120`. .. zeek:type:: KRB::SAFE_Msg - :source-code: base/init-bare.zeek 5052 5068 + :source-code: base/init-bare.zeek 5326 5342 :Type: :zeek:type:`record` @@ -5474,7 +5474,7 @@ Types The data from the SAFE message. See :rfc:`4120`. .. zeek:type:: KRB::KDC_Options - :source-code: base/init-bare.zeek 4987 5018 + :source-code: base/init-bare.zeek 5261 5292 :Type: :zeek:type:`record` @@ -5524,7 +5524,7 @@ Types KDC Options. See :rfc:`4120` .. zeek:type:: KRB::AP_Options - :source-code: base/init-bare.zeek 5021 5026 + :source-code: base/init-bare.zeek 5295 5300 :Type: :zeek:type:`record` @@ -5537,7 +5537,7 @@ Types AP Options. See :rfc:`4120` .. zeek:type:: KRB::Type_Value - :source-code: base/init-bare.zeek 5030 5035 + :source-code: base/init-bare.zeek 5304 5309 :Type: :zeek:type:`record` @@ -5551,7 +5551,7 @@ Types that have a type and a string value. .. zeek:type:: KRB::Ticket - :source-code: base/init-bare.zeek 5097 5110 + :source-code: base/init-bare.zeek 5371 5384 :Type: :zeek:type:`record` @@ -5576,13 +5576,13 @@ Types A Kerberos ticket. See :rfc:`4120`. .. zeek:type:: KRB::Ticket_Vector - :source-code: base/init-bare.zeek 5112 5112 + :source-code: base/init-bare.zeek 5386 5386 :Type: :zeek:type:`vector` of :zeek:type:`KRB::Ticket` .. zeek:type:: KRB::Host_Address - :source-code: base/init-bare.zeek 5040 5047 + :source-code: base/init-bare.zeek 5314 5321 :Type: :zeek:type:`record` @@ -5598,7 +5598,7 @@ Types A Kerberos host address See :rfc:`4120`. .. zeek:type:: KRB::KDC_Request - :source-code: base/init-bare.zeek 5115 5146 + :source-code: base/init-bare.zeek 5389 5420 :Type: :zeek:type:`record` @@ -5647,7 +5647,7 @@ Types The data from the AS_REQ and TGS_REQ messages. See :rfc:`4120`. .. zeek:type:: KRB::KDC_Response - :source-code: base/init-bare.zeek 5149 5163 + :source-code: base/init-bare.zeek 5423 5437 :Type: :zeek:type:`record` @@ -7014,7 +7014,7 @@ Options/Constants +++++++++++++++++ .. zeek:id:: MIME::max_depth - :source-code: base/init-bare.zeek 2844 2844 + :source-code: base/init-bare.zeek 3548 3548 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -7906,7 +7906,7 @@ Types +++++ .. zeek:type:: MQTT::ConnectMsg - :source-code: base/init-bare.zeek 5684 5714 + :source-code: base/init-bare.zeek 5746 5776 :Type: :zeek:type:`record` @@ -7948,7 +7948,7 @@ Types .. zeek:type:: MQTT::ConnectAckMsg - :source-code: base/init-bare.zeek 5716 5725 + :source-code: base/init-bare.zeek 5778 5787 :Type: :zeek:type:`record` @@ -7963,7 +7963,7 @@ Types .. zeek:type:: MQTT::PublishMsg - :source-code: base/init-bare.zeek 5727 5749 + :source-code: base/init-bare.zeek 5789 5811 :Type: :zeek:type:`record` @@ -8458,7 +8458,7 @@ Options/Constants +++++++++++++++++ .. zeek:id:: NCP::max_frame_size - :source-code: base/init-bare.zeek 5505 5505 + :source-code: base/init-bare.zeek 5565 5565 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -8857,7 +8857,7 @@ Types +++++ .. zeek:type:: NTLM::Negotiate - :source-code: base/init-bare.zeek 3070 3079 + :source-code: base/init-bare.zeek 3773 3782 :Type: :zeek:type:`record` @@ -8875,7 +8875,7 @@ Types .. zeek:type:: NTLM::Challenge - :source-code: base/init-bare.zeek 3107 3121 + :source-code: base/init-bare.zeek 3810 3824 :Type: :zeek:type:`record` @@ -8899,7 +8899,7 @@ Types .. zeek:type:: NTLM::Authenticate - :source-code: base/init-bare.zeek 3123 3138 + :source-code: base/init-bare.zeek 3826 3841 :Type: :zeek:type:`record` @@ -8926,7 +8926,7 @@ Types .. zeek:type:: NTLM::NegotiateFlags - :source-code: base/init-bare.zeek 3015 3068 + :source-code: base/init-bare.zeek 3718 3771 :Type: :zeek:type:`record` @@ -9003,7 +9003,7 @@ Types .. zeek:type:: NTLM::Version - :source-code: base/init-bare.zeek 3004 3013 + :source-code: base/init-bare.zeek 3707 3716 :Type: :zeek:type:`record` @@ -9021,7 +9021,7 @@ Types .. zeek:type:: NTLM::AVs - :source-code: base/init-bare.zeek 3081 3105 + :source-code: base/init-bare.zeek 3784 3808 :Type: :zeek:type:`record` @@ -9120,7 +9120,7 @@ Types +++++ .. zeek:type:: NTP::StandardMessage - :source-code: base/init-bare.zeek 5513 5566 + :source-code: base/init-bare.zeek 5574 5627 :Type: :zeek:type:`record` @@ -9195,7 +9195,7 @@ Types for standard synchronization operations. .. zeek:type:: NTP::ControlMessage - :source-code: base/init-bare.zeek 5571 5605 + :source-code: base/init-bare.zeek 5632 5666 :Type: :zeek:type:`record` @@ -9246,7 +9246,7 @@ Types for control operations. .. zeek:type:: NTP::Mode7Message - :source-code: base/init-bare.zeek 5614 5647 + :source-code: base/init-bare.zeek 5675 5708 :Type: :zeek:type:`record` @@ -9297,7 +9297,7 @@ Types project `_, code v. ntp-4.2.8p13, in include/ntp_request.h. .. zeek:type:: NTP::Message - :source-code: base/init-bare.zeek 5652 5679 + :source-code: base/init-bare.zeek 5713 5740 :Type: :zeek:type:`record` @@ -9389,7 +9389,7 @@ Options/Constants +++++++++++++++++ .. zeek:id:: POP3::max_pending_commands - :source-code: base/init-bare.zeek 2947 2947 + :source-code: base/init-bare.zeek 3650 3650 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -9401,7 +9401,7 @@ Options/Constants Setting this value to 0 removes the limit. .. zeek:id:: POP3::max_unknown_client_commands - :source-code: base/init-bare.zeek 2953 2953 + :source-code: base/init-bare.zeek 3656 3656 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -9805,19 +9805,19 @@ Types +++++ .. zeek:type:: RADIUS::AttributeList - :source-code: base/init-bare.zeek 4731 4731 + :source-code: base/init-bare.zeek 5002 5002 :Type: :zeek:type:`vector` of :zeek:type:`string` .. zeek:type:: RADIUS::Attributes - :source-code: base/init-bare.zeek 4732 4732 + :source-code: base/init-bare.zeek 5003 5003 :Type: :zeek:type:`table` [:zeek:type:`count`] of :zeek:type:`RADIUS::AttributeList` .. zeek:type:: RADIUS::Message - :source-code: base/init-bare.zeek 4734 4743 + :source-code: base/init-bare.zeek 5005 5014 :Type: :zeek:type:`record` @@ -9892,7 +9892,7 @@ Types +++++ .. zeek:type:: RDP::EarlyCapabilityFlags - :source-code: base/init-bare.zeek 4748 4758 + :source-code: base/init-bare.zeek 5020 5030 :Type: :zeek:type:`record` @@ -9916,7 +9916,7 @@ Types .. zeek:type:: RDP::ClientCoreData - :source-code: base/init-bare.zeek 4760 4781 + :source-code: base/init-bare.zeek 5032 5053 :Type: :zeek:type:`record` @@ -9962,7 +9962,7 @@ Types .. zeek:type:: RDP::ClientSecurityData - :source-code: base/init-bare.zeek 4785 4797 + :source-code: base/init-bare.zeek 5057 5069 :Type: :zeek:type:`record` @@ -9983,7 +9983,7 @@ Types to advertise client cryptographic support. .. zeek:type:: RDP::ClientClusterData - :source-code: base/init-bare.zeek 4833 4852 + :source-code: base/init-bare.zeek 5105 5124 :Type: :zeek:type:`record` @@ -10016,14 +10016,14 @@ Types or to request a connection to a given session identifier. .. zeek:type:: RDP::ClientChannelList - :source-code: base/init-bare.zeek 4855 4855 + :source-code: base/init-bare.zeek 5127 5127 :Type: :zeek:type:`vector` of :zeek:type:`RDP::ClientChannelDef` The list of channels requested by the client. .. zeek:type:: RDP::ClientChannelDef - :source-code: base/init-bare.zeek 4800 4828 + :source-code: base/init-bare.zeek 5072 5100 :Type: :zeek:type:`record` @@ -11847,7 +11847,7 @@ Options/Constants +++++++++++++++++ .. zeek:id:: SMB::pipe_filenames - :source-code: base/init-bare.zeek 3173 3173 + :source-code: base/init-bare.zeek 3876 3876 :Type: :zeek:type:`set` [:zeek:type:`string`] :Attributes: :zeek:attr:`&redef` @@ -11866,7 +11866,7 @@ Options/Constants .. zeek:see:: smb_pipe_connect_heuristic .. zeek:id:: SMB::max_pending_messages - :source-code: base/init-bare.zeek 3183 3183 + :source-code: base/init-bare.zeek 3886 3886 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -11882,7 +11882,7 @@ Options/Constants .. zeek:see:: smb2_discarded_messages_state .. zeek:id:: SMB::max_dce_rpc_analyzers - :source-code: base/init-bare.zeek 3189 3189 + :source-code: base/init-bare.zeek 3892 3892 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -11897,7 +11897,7 @@ Types +++++ .. zeek:type:: SMB1::NegotiateResponse - :source-code: base/init-bare.zeek 3363 3372 + :source-code: base/init-bare.zeek 4066 4075 :Type: :zeek:type:`record` @@ -11914,7 +11914,7 @@ Types .. zeek:type:: SMB1::NegotiateResponseCore - :source-code: base/init-bare.zeek 3292 3295 + :source-code: base/init-bare.zeek 3995 3998 :Type: :zeek:type:`record` @@ -11923,7 +11923,7 @@ Types .. zeek:type:: SMB1::NegotiateResponseLANMAN - :source-code: base/init-bare.zeek 3297 3323 + :source-code: base/init-bare.zeek 4000 4026 :Type: :zeek:type:`record` @@ -11963,7 +11963,7 @@ Types .. zeek:type:: SMB1::NegotiateResponseNTLM - :source-code: base/init-bare.zeek 3325 3361 + :source-code: base/init-bare.zeek 4028 4064 :Type: :zeek:type:`record` @@ -12016,7 +12016,7 @@ Types .. zeek:type:: SMB1::NegotiateResponseSecurity - :source-code: base/init-bare.zeek 3275 3290 + :source-code: base/init-bare.zeek 3978 3993 :Type: :zeek:type:`record` @@ -12040,7 +12040,7 @@ Types .. zeek:type:: SMB1::NegotiateRawMode - :source-code: base/init-bare.zeek 3224 3229 + :source-code: base/init-bare.zeek 3927 3932 :Type: :zeek:type:`record` @@ -12052,7 +12052,7 @@ Types .. zeek:type:: SMB1::NegotiateCapabilities - :source-code: base/init-bare.zeek 3231 3273 + :source-code: base/init-bare.zeek 3934 3976 :Type: :zeek:type:`record` @@ -12114,7 +12114,7 @@ Types .. zeek:type:: SMB1::SessionSetupAndXRequest - :source-code: base/init-bare.zeek 3390 3432 + :source-code: base/init-bare.zeek 4093 4135 :Type: :zeek:type:`record` @@ -12173,7 +12173,7 @@ Types .. zeek:type:: SMB1::SessionSetupAndXResponse - :source-code: base/init-bare.zeek 3434 3447 + :source-code: base/init-bare.zeek 4137 4150 :Type: :zeek:type:`record` @@ -12197,7 +12197,7 @@ Types .. zeek:type:: SMB1::SessionSetupAndXCapabilities - :source-code: base/init-bare.zeek 3374 3388 + :source-code: base/init-bare.zeek 4077 4091 :Type: :zeek:type:`record` @@ -12222,7 +12222,7 @@ Types .. zeek:type:: SMB1::Trans_Sec_Args - :source-code: base/init-bare.zeek 3476 3493 + :source-code: base/init-bare.zeek 4179 4196 :Type: :zeek:type:`record` @@ -12252,7 +12252,7 @@ Types .. zeek:type:: SMB1::Find_First2_Request_Args - :source-code: base/init-bare.zeek 3516 3530 + :source-code: base/init-bare.zeek 4219 4233 :Type: :zeek:type:`record` @@ -12277,7 +12277,7 @@ Types .. zeek:type:: SMB1::Find_First2_Response_Args - :source-code: base/init-bare.zeek 3532 3542 + :source-code: base/init-bare.zeek 4235 4245 :Type: :zeek:type:`record` @@ -12296,7 +12296,7 @@ Types .. zeek:type:: SMB1::Trans2_Args - :source-code: base/init-bare.zeek 3449 3474 + :source-code: base/init-bare.zeek 4152 4177 :Type: :zeek:type:`record` @@ -12338,7 +12338,7 @@ Types .. zeek:type:: SMB1::Trans2_Sec_Args - :source-code: base/init-bare.zeek 3495 3514 + :source-code: base/init-bare.zeek 4198 4217 :Type: :zeek:type:`record` @@ -12371,7 +12371,7 @@ Types .. zeek:type:: SMB2::CloseResponse - :source-code: base/init-bare.zeek 3657 3666 + :source-code: base/init-bare.zeek 4360 4369 :Type: :zeek:type:`record` @@ -12395,7 +12395,7 @@ Types .. zeek:see:: smb2_close_response .. zeek:type:: SMB2::CreateRequest - :source-code: base/init-bare.zeek 3805 3812 + :source-code: base/init-bare.zeek 4508 4515 :Type: :zeek:type:`record` @@ -12415,7 +12415,7 @@ Types .. zeek:see:: smb2_create_request .. zeek:type:: SMB2::CreateResponse - :source-code: base/init-bare.zeek 3820 3831 + :source-code: base/init-bare.zeek 4523 4534 :Type: :zeek:type:`record` @@ -12442,7 +12442,7 @@ Types .. zeek:see:: smb2_create_response .. zeek:type:: SMB2::NegotiateResponse - :source-code: base/init-bare.zeek 3732 3749 + :source-code: base/init-bare.zeek 4435 4452 :Type: :zeek:type:`record` @@ -12476,7 +12476,7 @@ Types .. zeek:see:: smb2_negotiate_response .. zeek:type:: SMB2::SessionSetupRequest - :source-code: base/init-bare.zeek 3757 3760 + :source-code: base/init-bare.zeek 4460 4463 :Type: :zeek:type:`record` @@ -12491,7 +12491,7 @@ Types .. zeek:see:: smb2_session_setup_request .. zeek:type:: SMB2::SessionSetupResponse - :source-code: base/init-bare.zeek 3784 3787 + :source-code: base/init-bare.zeek 4487 4490 :Type: :zeek:type:`record` @@ -12507,7 +12507,7 @@ Types .. zeek:see:: smb2_session_setup_response .. zeek:type:: SMB2::SessionSetupFlags - :source-code: base/init-bare.zeek 3768 3775 + :source-code: base/init-bare.zeek 4471 4478 :Type: :zeek:type:`record` @@ -12528,7 +12528,7 @@ Types .. zeek:see:: smb2_session_setup_response .. zeek:type:: SMB2::TreeConnectResponse - :source-code: base/init-bare.zeek 3795 3798 + :source-code: base/init-bare.zeek 4498 4501 :Type: :zeek:type:`record` @@ -12543,7 +12543,7 @@ Types .. zeek:see:: smb2_tree_connect_response .. zeek:type:: SMB2::Transform_header - :source-code: base/init-bare.zeek 3880 3891 + :source-code: base/init-bare.zeek 4583 4594 :Type: :zeek:type:`record` @@ -12575,7 +12575,7 @@ Types smb2_write_request .. zeek:type:: SMB::MACTimes - :source-code: base/init-bare.zeek 3149 3166 + :source-code: base/init-bare.zeek 3852 3869 :Type: :zeek:type:`record` @@ -12610,7 +12610,7 @@ Types .. zeek:see:: smb1_nt_create_andx_response smb2_create_response .. zeek:type:: SMB1::Header - :source-code: base/init-bare.zeek 3213 3222 + :source-code: base/init-bare.zeek 3916 3925 :Type: :zeek:type:`record` @@ -12658,7 +12658,7 @@ Types smb1_write_andx_response .. zeek:type:: SMB2::Header - :source-code: base/init-bare.zeek 3561 3586 + :source-code: base/init-bare.zeek 4264 4289 :Type: :zeek:type:`record` @@ -12709,7 +12709,7 @@ Types smb2_write_request .. zeek:type:: SMB2::GUID - :source-code: base/init-bare.zeek 3594 3599 + :source-code: base/init-bare.zeek 4297 4302 :Type: :zeek:type:`record` @@ -12727,7 +12727,7 @@ Types smb2_file_rename smb2_file_delete smb2_write_request .. zeek:type:: SMB2::FileAttrs - :source-code: base/init-bare.zeek 3606 3649 + :source-code: base/init-bare.zeek 4309 4352 :Type: :zeek:type:`record` @@ -12795,7 +12795,7 @@ Types .. zeek:see:: smb2_create_response .. zeek:type:: SMB2::Fscontrol - :source-code: base/init-bare.zeek 3837 3850 + :source-code: base/init-bare.zeek 4540 4553 :Type: :zeek:type:`record` @@ -12823,7 +12823,7 @@ Types .. zeek:type:: SMB2::FileEA - :source-code: base/init-bare.zeek 3856 3861 + :source-code: base/init-bare.zeek 4559 4564 :Type: :zeek:type:`record` @@ -12839,7 +12839,7 @@ Types .. zeek:type:: SMB2::FileEAs - :source-code: base/init-bare.zeek 3867 3867 + :source-code: base/init-bare.zeek 4570 4570 :Type: :zeek:type:`vector` of :zeek:type:`SMB2::FileEA` @@ -12849,7 +12849,7 @@ Types .. zeek:type:: SMB2::PreAuthIntegrityCapabilities - :source-code: base/init-bare.zeek 3672 3681 + :source-code: base/init-bare.zeek 4375 4384 :Type: :zeek:type:`record` @@ -12871,7 +12871,7 @@ Types .. zeek:type:: SMB2::EncryptionCapabilities - :source-code: base/init-bare.zeek 3687 3692 + :source-code: base/init-bare.zeek 4390 4395 :Type: :zeek:type:`record` @@ -12887,7 +12887,7 @@ Types .. zeek:type:: SMB2::CompressionCapabilities - :source-code: base/init-bare.zeek 3698 3703 + :source-code: base/init-bare.zeek 4401 4406 :Type: :zeek:type:`record` @@ -12903,7 +12903,7 @@ Types .. zeek:type:: SMB2::NegotiateContextValue - :source-code: base/init-bare.zeek 3709 3722 + :source-code: base/init-bare.zeek 4412 4425 :Type: :zeek:type:`record` @@ -12931,7 +12931,7 @@ Types .. zeek:type:: SMB2::NegotiateContextValues - :source-code: base/init-bare.zeek 3724 3724 + :source-code: base/init-bare.zeek 4427 4427 :Type: :zeek:type:`vector` of :zeek:type:`SMB2::NegotiateContextValue` @@ -14525,7 +14525,7 @@ Options/Constants +++++++++++++++++ .. zeek:id:: SMTP::bdat_max_line_length - :source-code: base/init-bare.zeek 371 371 + :source-code: base/init-bare.zeek 596 596 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -14716,7 +14716,7 @@ Types +++++ .. zeek:type:: SNMP::Header - :source-code: base/init-bare.zeek 4899 4904 + :source-code: base/init-bare.zeek 5172 5177 :Type: :zeek:type:`record` @@ -14736,7 +14736,7 @@ Types determines what header field is initialized. .. zeek:type:: SNMP::HeaderV1 - :source-code: base/init-bare.zeek 4864 4866 + :source-code: base/init-bare.zeek 5137 5139 :Type: :zeek:type:`record` @@ -14746,7 +14746,7 @@ Types including the PDU data. See :rfc:`1157`. .. zeek:type:: SNMP::HeaderV2 - :source-code: base/init-bare.zeek 4870 4872 + :source-code: base/init-bare.zeek 5143 5145 :Type: :zeek:type:`record` @@ -14756,7 +14756,7 @@ Types including the PDU data. See :rfc:`1901`. .. zeek:type:: SNMP::HeaderV3 - :source-code: base/init-bare.zeek 4884 4894 + :source-code: base/init-bare.zeek 5157 5167 :Type: :zeek:type:`record` @@ -14782,7 +14782,7 @@ Types including the PDU data. See :rfc:`3412`. .. zeek:type:: SNMP::PDU - :source-code: base/init-bare.zeek 4954 4959 + :source-code: base/init-bare.zeek 5227 5232 :Type: :zeek:type:`record` @@ -14797,7 +14797,7 @@ Types A ``PDU`` data structure from either :rfc:`1157` or :rfc:`3416`. .. zeek:type:: SNMP::TrapPDU - :source-code: base/init-bare.zeek 4962 4969 + :source-code: base/init-bare.zeek 5235 5242 :Type: :zeek:type:`record` @@ -14816,7 +14816,7 @@ Types A ``Trap-PDU`` data structure from :rfc:`1157`. .. zeek:type:: SNMP::BulkPDU - :source-code: base/init-bare.zeek 4972 4977 + :source-code: base/init-bare.zeek 5245 5250 :Type: :zeek:type:`record` @@ -14831,7 +14831,7 @@ Types A ``BulkPDU`` data structure from :rfc:`3416`. .. zeek:type:: SNMP::ScopedPDU_Context - :source-code: base/init-bare.zeek 4877 4880 + :source-code: base/init-bare.zeek 5150 5153 :Type: :zeek:type:`record` @@ -14844,7 +14844,7 @@ Types See :rfc:`3412`. .. zeek:type:: SNMP::ObjectValue - :source-code: base/init-bare.zeek 4915 4922 + :source-code: base/init-bare.zeek 5188 5195 :Type: :zeek:type:`record` @@ -14871,7 +14871,7 @@ Types values will only have their corresponding tag value set. .. zeek:type:: SNMP::Binding - :source-code: base/init-bare.zeek 4944 4947 + :source-code: base/init-bare.zeek 5217 5220 :Type: :zeek:type:`record` @@ -14883,7 +14883,7 @@ Types :rfc:`3416`, which maps an Object Identifier to a value. .. zeek:type:: SNMP::Bindings - :source-code: base/init-bare.zeek 4951 4951 + :source-code: base/init-bare.zeek 5224 5224 :Type: :zeek:type:`vector` of :zeek:type:`SNMP::Binding` @@ -15264,7 +15264,7 @@ Types +++++ .. zeek:type:: SSH::Algorithm_Prefs - :source-code: base/init-bare.zeek 2971 2976 + :source-code: base/init-bare.zeek 3674 3679 :Type: :zeek:type:`record` @@ -15278,7 +15278,7 @@ Types in each direction. .. zeek:type:: SSH::Capabilities - :source-code: base/init-bare.zeek 2983 2998 + :source-code: base/init-bare.zeek 3686 3701 :Type: :zeek:type:`record` @@ -15774,7 +15774,7 @@ Options/Constants +++++++++++++++++ .. zeek:id:: SSL::dtls_max_version_errors - :source-code: base/init-bare.zeek 4644 4644 + :source-code: base/init-bare.zeek 4914 4914 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -15786,7 +15786,7 @@ Options/Constants might be interleaved in the same UDP "connection". .. zeek:id:: SSL::dtls_max_reported_version_errors - :source-code: base/init-bare.zeek 4647 4647 + :source-code: base/init-bare.zeek 4917 4917 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -15795,7 +15795,7 @@ Options/Constants Maximum number of invalid version errors to report in one DTLS connection. .. zeek:id:: SSL::max_alerts_per_record - :source-code: base/init-bare.zeek 4652 4652 + :source-code: base/init-bare.zeek 4922 4922 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -15809,7 +15809,7 @@ Types +++++ .. zeek:type:: SSL::SignatureAndHashAlgorithm - :source-code: base/init-bare.zeek 4630 4633 + :source-code: base/init-bare.zeek 4900 4903 :Type: :zeek:type:`record` @@ -15821,7 +15821,7 @@ Types .. zeek:type:: SSL::PSKIdentity - :source-code: base/init-bare.zeek 4635 4638 + :source-code: base/init-bare.zeek 4905 4908 :Type: :zeek:type:`record` @@ -17026,7 +17026,7 @@ Types +++++ .. zeek:type:: TCP::Option - :source-code: base/init-bare.zeek 395 422 + :source-code: base/init-bare.zeek 603 630 :Type: :zeek:type:`record` @@ -17070,7 +17070,7 @@ Types A TCP Option field parsed from a TCP header. .. zeek:type:: TCP::OptionList - :source-code: base/init-bare.zeek 425 425 + :source-code: base/init-bare.zeek 633 633 :Type: :zeek:type:`vector` of :zeek:type:`TCP::Option` @@ -17720,7 +17720,7 @@ Options/Constants +++++++++++++++++ .. zeek:id:: WebSocket::payload_chunk_size - :source-code: base/init-bare.zeek 469 469 + :source-code: base/init-bare.zeek 710 710 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -17736,7 +17736,7 @@ Types +++++ .. zeek:type:: WebSocket::AnalyzerConfig - :source-code: base/init-bare.zeek 484 500 + :source-code: base/init-bare.zeek 725 741 :Type: :zeek:type:`record` diff --git a/script-reference/autogenerated-script-index.rst b/script-reference/autogenerated-script-index.rst index f1b4f1bd4..58955ee9c 100644 --- a/script-reference/autogenerated-script-index.rst +++ b/script-reference/autogenerated-script-index.rst @@ -17,9 +17,9 @@ base/bif/mmdb.bif.zeek base/bif/plugins/Zeek_SNMP.types.bif.zeek base/bif/plugins/Zeek_KRB.types.bif.zeek - base/bif/event.bif.zeek base/bif/telemetry_functions.bif.zeek base/bif/telemetry_types.bif.zeek + base/bif/event.bif.zeek base/packet-protocols/__load__.zeek base/packet-protocols/main.zeek base/frameworks/analyzer/main.zeek diff --git a/scripts/base/bif/event.bif.zeek.rst b/scripts/base/bif/event.bif.zeek.rst index 4a475b6df..bddb41fa0 100644 --- a/scripts/base/bif/event.bif.zeek.rst +++ b/scripts/base/bif/event.bif.zeek.rst @@ -827,7 +827,7 @@ Events .. zeek:see:: new_packet tcp_packet ipv6_ext_headers .. zeek:id:: net_done - :source-code: base/init-bare.zeek 6196 6198 + :source-code: base/init-bare.zeek 6211 6214 :Type: :zeek:type:`event` (t: :zeek:type:`time`) diff --git a/scripts/base/bif/index.rst b/scripts/base/bif/index.rst index 90c8124c5..6ac60def0 100644 --- a/scripts/base/bif/index.rst +++ b/scripts/base/bif/index.rst @@ -73,6 +73,13 @@ Package: base/bif :doc:`/scripts/base/bif/plugins/Zeek_KRB.types.bif.zeek` +:doc:`/scripts/base/bif/telemetry_functions.bif.zeek` + + Functions for accessing counter metrics from script land. + +:doc:`/scripts/base/bif/telemetry_types.bif.zeek` + + :doc:`/scripts/base/bif/event.bif.zeek` The protocol-independent events that the C/C++ core of Zeek can generate. @@ -82,13 +89,6 @@ Package: base/bif by more than one protocols analyzer (like events generated by both UDP and TCP analysis.) -:doc:`/scripts/base/bif/telemetry_functions.bif.zeek` - - Functions for accessing counter metrics from script land. - -:doc:`/scripts/base/bif/telemetry_types.bif.zeek` - - :doc:`/scripts/base/bif/analyzer.bif.zeek` Internal functions and types used by the analyzer framework. diff --git a/scripts/base/init-bare.zeek.rst b/scripts/base/init-bare.zeek.rst index 73c203f60..aa006d386 100644 --- a/scripts/base/init-bare.zeek.rst +++ b/scripts/base/init-bare.zeek.rst @@ -96,6 +96,7 @@ Redefinable Options :zeek:id:`DCE_RPC::max_frag_data`: :zeek:type:`count` :zeek:attr:`&redef` The maximum number of fragmented bytes that the DCE_RPC analyzer will tolerate on a command before the analyzer will generate a weird and skip further input. +:zeek:id:`FTP::max_command_length`: :zeek:type:`count` :zeek:attr:`&redef` Limits the size of commands accepted by the FTP analyzer. :zeek:id:`HTTP::upgrade_analyzers`: :zeek:type:`table` :zeek:attr:`&redef` Lookup table for Upgrade analyzers. :zeek:id:`IP::protocol_names`: :zeek:type:`table` :zeek:attr:`&redef` :zeek:attr:`&default` = :zeek:type:`function` Mapping from IP protocol identifier values to string names. :zeek:id:`KRB::keytab`: :zeek:type:`string` :zeek:attr:`&redef` Kerberos keytab file name. @@ -130,6 +131,8 @@ Redefinable Options :zeek:id:`SMB::max_pending_messages`: :zeek:type:`count` :zeek:attr:`&redef` The maximum number of messages for which to retain state about offsets, fids, or tree ids within the parser. :zeek:id:`SMB::pipe_filenames`: :zeek:type:`set` :zeek:attr:`&redef` A set of file names used as named pipes over SMB. +:zeek:id:`SMTP::bdat_max_line_length`: :zeek:type:`count` :zeek:attr:`&redef` The maximum line length within a BDAT chunk before a forceful linebreak + is introduced and a weird is raised. :zeek:id:`SSL::dtls_max_reported_version_errors`: :zeek:type:`count` :zeek:attr:`&redef` Maximum number of invalid version errors to report in one DTLS connection. :zeek:id:`SSL::dtls_max_version_errors`: :zeek:type:`count` :zeek:attr:`&redef` Number of non-DTLS frames that can occur in a DTLS connection before parsing of the connection is suspended. @@ -814,7 +817,7 @@ Detailed Interface Runtime Options ############### .. zeek:id:: MQTT::max_payload_size - :source-code: base/init-bare.zeek 5754 5754 + :source-code: base/init-bare.zeek 5816 5816 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -825,7 +828,7 @@ Runtime Options default MQTT logs generated from that). .. zeek:id:: Weird::sampling_duration - :source-code: base/init-bare.zeek 5805 5805 + :source-code: base/init-bare.zeek 5869 5869 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -844,7 +847,7 @@ Runtime Options threshold. .. zeek:id:: Weird::sampling_global_list - :source-code: base/init-bare.zeek 5781 5781 + :source-code: base/init-bare.zeek 5845 5845 :Type: :zeek:type:`set` [:zeek:type:`string`] :Attributes: :zeek:attr:`&redef` @@ -853,7 +856,7 @@ Runtime Options Rate-limits weird names in the table globally instead of per connection/flow. .. zeek:id:: Weird::sampling_rate - :source-code: base/init-bare.zeek 5792 5792 + :source-code: base/init-bare.zeek 5856 5856 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -865,7 +868,7 @@ Runtime Options will disable all output of rate-limited weirds. .. zeek:id:: Weird::sampling_threshold - :source-code: base/init-bare.zeek 5786 5786 + :source-code: base/init-bare.zeek 5850 5850 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -876,7 +879,7 @@ Runtime Options raise events for script-layer handling before being rate-limited. .. zeek:id:: Weird::sampling_whitelist - :source-code: base/init-bare.zeek 5778 5778 + :source-code: base/init-bare.zeek 5842 5842 :Type: :zeek:type:`set` [:zeek:type:`string`] :Attributes: :zeek:attr:`&redef` @@ -885,7 +888,7 @@ Runtime Options Prevents rate-limiting sampling of any weirds named in the table. .. zeek:id:: default_file_bof_buffer_size - :source-code: base/init-bare.zeek 597 597 + :source-code: base/init-bare.zeek 826 826 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -902,7 +905,7 @@ Runtime Options matching or later, will receive a copy of this buffer. .. zeek:id:: default_file_timeout_interval - :source-code: base/init-bare.zeek 592 592 + :source-code: base/init-bare.zeek 821 821 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -912,7 +915,7 @@ Runtime Options gives up and discards any internal state related to the file. .. zeek:id:: ignore_checksums_nets - :source-code: base/init-bare.zeek 1253 1253 + :source-code: base/init-bare.zeek 1519 1519 :Type: :zeek:type:`set` [:zeek:type:`subnet`] :Attributes: :zeek:attr:`&redef` @@ -925,7 +928,7 @@ Runtime Options packets before the hardware has had a chance to apply the checksums. .. zeek:id:: udp_content_delivery_ports_use_resp - :source-code: base/init-bare.zeek 1452 1452 + :source-code: base/init-bare.zeek 1718 1718 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -937,7 +940,7 @@ Runtime Options port. .. zeek:id:: udp_content_ports - :source-code: base/init-bare.zeek 1446 1446 + :source-code: base/init-bare.zeek 1712 1712 :Type: :zeek:type:`set` [:zeek:type:`port`] :Attributes: :zeek:attr:`&redef` @@ -956,7 +959,7 @@ Runtime Options Redefinable Options ################### .. zeek:id:: BinPAC::flowbuffer_capacity_max - :source-code: base/init-bare.zeek 5834 5834 + :source-code: base/init-bare.zeek 5900 5900 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -966,7 +969,7 @@ Redefinable Options grow to for use with incremental parsing of a given connection/analyzer. .. zeek:id:: BinPAC::flowbuffer_capacity_min - :source-code: base/init-bare.zeek 5839 5839 + :source-code: base/init-bare.zeek 5905 5905 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -977,7 +980,7 @@ Redefinable Options later contracted, its capacity is also reduced to this size. .. zeek:id:: BinPAC::flowbuffer_contract_threshold - :source-code: base/init-bare.zeek 5847 5847 + :source-code: base/init-bare.zeek 5913 5913 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -991,7 +994,7 @@ Redefinable Options than this value, it will be contracted. .. zeek:id:: Cluster::backend - :source-code: base/init-bare.zeek 5762 5762 + :source-code: base/init-bare.zeek 5825 5825 :Type: :zeek:type:`Cluster::BackendTag` :Attributes: :zeek:attr:`&redef` @@ -1006,7 +1009,7 @@ Redefinable Options Cluster backend to use. Default is the broker backend. .. zeek:id:: Cluster::event_serializer - :source-code: base/init-bare.zeek 5767 5767 + :source-code: base/init-bare.zeek 5830 5830 :Type: :zeek:type:`Cluster::EventSerializerTag` :Attributes: :zeek:attr:`&redef` @@ -1017,7 +1020,7 @@ Redefinable Options This currently has no effect for backend BROKER. .. zeek:id:: Cluster::log_serializer - :source-code: base/init-bare.zeek 5772 5772 + :source-code: base/init-bare.zeek 5835 5835 :Type: :zeek:type:`Cluster::LogSerializerTag` :Attributes: :zeek:attr:`&redef` @@ -1028,7 +1031,7 @@ Redefinable Options This currently has no effect for backend BROKER. .. zeek:id:: DCE_RPC::max_cmd_reassembly - :source-code: base/init-bare.zeek 5494 5494 + :source-code: base/init-bare.zeek 5553 5553 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1039,7 +1042,7 @@ Redefinable Options a weird and skip further input. .. zeek:id:: DCE_RPC::max_frag_data - :source-code: base/init-bare.zeek 5499 5499 + :source-code: base/init-bare.zeek 5558 5558 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1049,8 +1052,18 @@ Redefinable Options will tolerate on a command before the analyzer will generate a weird and skip further input. +.. zeek:id:: FTP::max_command_length + :source-code: base/init-bare.zeek 587 587 + + :Type: :zeek:type:`count` + :Attributes: :zeek:attr:`&redef` + :Default: ``100`` + + Limits the size of commands accepted by the FTP analyzer. Longer commands + raise a FTP_max_command_length_exceeded weird and are discarded. + .. zeek:id:: HTTP::upgrade_analyzers - :source-code: base/init-bare.zeek 459 459 + :source-code: base/init-bare.zeek 699 699 :Type: :zeek:type:`table` [:zeek:type:`string`] of :zeek:type:`Analyzer::Tag` :Attributes: :zeek:attr:`&redef` @@ -1068,7 +1081,7 @@ Redefinable Options uses dynamic protocol detection for the upgraded to protocol instead. .. zeek:id:: IP::protocol_names - :source-code: base/init-bare.zeek 5986 5986 + :source-code: base/init-bare.zeek 6053 6053 :Type: :zeek:type:`table` [:zeek:type:`count`] of :zeek:type:`string` :Attributes: :zeek:attr:`&redef` :zeek:attr:`&default` = :zeek:type:`function` @@ -1230,7 +1243,7 @@ Redefinable Options Mapping from IP protocol identifier values to string names. .. zeek:id:: KRB::keytab - :source-code: base/init-bare.zeek 4985 4985 + :source-code: base/init-bare.zeek 5259 5259 :Type: :zeek:type:`string` :Attributes: :zeek:attr:`&redef` @@ -1239,7 +1252,7 @@ Redefinable Options Kerberos keytab file name. Used to decrypt tickets encountered on the wire. .. zeek:id:: Log::flush_interval - :source-code: base/init-bare.zeek 2925 2925 + :source-code: base/init-bare.zeek 3628 3628 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -1256,7 +1269,7 @@ Redefinable Options .. :zeek:see:`Log::write_buffer_size` .. zeek:id:: Log::write_buffer_size - :source-code: base/init-bare.zeek 2936 2936 + :source-code: base/init-bare.zeek 3639 3639 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1273,7 +1286,7 @@ Redefinable Options .. :zeek:see:`Log::flush_interval` .. zeek:id:: MIME::max_depth - :source-code: base/init-bare.zeek 2844 2844 + :source-code: base/init-bare.zeek 3548 3548 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1283,7 +1296,7 @@ Redefinable Options reached. Setting this value to 0 removes the limit. .. zeek:id:: NCP::max_frame_size - :source-code: base/init-bare.zeek 5505 5505 + :source-code: base/init-bare.zeek 5565 5565 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1292,7 +1305,7 @@ Redefinable Options The maximum number of bytes to allocate when parsing NCP frames. .. zeek:id:: NFS3::return_data - :source-code: base/init-bare.zeek 2530 2530 + :source-code: base/init-bare.zeek 3234 3234 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1304,7 +1317,7 @@ Redefinable Options .. zeek:see:: NFS3::return_data_max NFS3::return_data_first_only .. zeek:id:: NFS3::return_data_first_only - :source-code: base/init-bare.zeek 2539 2539 + :source-code: base/init-bare.zeek 3243 3243 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1315,7 +1328,7 @@ Redefinable Options beginning of the file. .. zeek:id:: NFS3::return_data_max - :source-code: base/init-bare.zeek 2534 2534 + :source-code: base/init-bare.zeek 3238 3238 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1325,7 +1338,7 @@ Redefinable Options returned at most. .. zeek:id:: POP3::max_pending_commands - :source-code: base/init-bare.zeek 2947 2947 + :source-code: base/init-bare.zeek 3650 3650 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1337,7 +1350,7 @@ Redefinable Options Setting this value to 0 removes the limit. .. zeek:id:: POP3::max_unknown_client_commands - :source-code: base/init-bare.zeek 2953 2953 + :source-code: base/init-bare.zeek 3656 3656 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1349,7 +1362,7 @@ Redefinable Options Setting this value to 0 removes the limit. .. zeek:id:: Pcap::bufsize - :source-code: base/init-bare.zeek 5428 5428 + :source-code: base/init-bare.zeek 5486 5486 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1359,7 +1372,7 @@ Redefinable Options interfaces. .. zeek:id:: Pcap::bufsize_offline_bytes - :source-code: base/init-bare.zeek 5433 5433 + :source-code: base/init-bare.zeek 5491 5491 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1370,7 +1383,7 @@ Redefinable Options as chosen by fopen(). .. zeek:id:: Pcap::non_fd_timeout - :source-code: base/init-bare.zeek 5459 5459 + :source-code: base/init-bare.zeek 5517 5517 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -1402,7 +1415,7 @@ Redefinable Options .. zeek:id:: Pcap::snaplen - :source-code: base/init-bare.zeek 5424 5424 + :source-code: base/init-bare.zeek 5482 5482 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1411,7 +1424,7 @@ Redefinable Options Number of bytes per packet to capture from live interfaces. .. zeek:id:: Reporter::errors_to_stderr - :source-code: base/init-bare.zeek 5418 5418 + :source-code: base/init-bare.zeek 5475 5475 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1422,7 +1435,7 @@ Redefinable Options external harness and shouldn't output anything to the console. .. zeek:id:: Reporter::info_to_stderr - :source-code: base/init-bare.zeek 5408 5408 + :source-code: base/init-bare.zeek 5465 5465 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1433,7 +1446,7 @@ Redefinable Options external harness and shouldn't output anything to the console. .. zeek:id:: Reporter::warnings_to_stderr - :source-code: base/init-bare.zeek 5413 5413 + :source-code: base/init-bare.zeek 5470 5470 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1444,7 +1457,7 @@ Redefinable Options external harness and shouldn't output anything to the console. .. zeek:id:: SMB::max_dce_rpc_analyzers - :source-code: base/init-bare.zeek 3189 3189 + :source-code: base/init-bare.zeek 3892 3892 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1456,7 +1469,7 @@ Redefinable Options .. zeek:see:: smb_discarded_dce_rpc_analyzers .. zeek:id:: SMB::max_pending_messages - :source-code: base/init-bare.zeek 3183 3183 + :source-code: base/init-bare.zeek 3886 3886 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1472,7 +1485,7 @@ Redefinable Options .. zeek:see:: smb2_discarded_messages_state .. zeek:id:: SMB::pipe_filenames - :source-code: base/init-bare.zeek 3173 3173 + :source-code: base/init-bare.zeek 3876 3876 :Type: :zeek:type:`set` [:zeek:type:`string`] :Attributes: :zeek:attr:`&redef` @@ -1490,8 +1503,19 @@ Redefinable Options .. zeek:see:: smb_pipe_connect_heuristic +.. zeek:id:: SMTP::bdat_max_line_length + :source-code: base/init-bare.zeek 596 596 + + :Type: :zeek:type:`count` + :Attributes: :zeek:attr:`&redef` + :Default: ``4096`` + + The maximum line length within a BDAT chunk before a forceful linebreak + is introduced and a weird is raised. Conventionally, MIME messages + have a maximum line length of 1000 octets when properly encoded. + .. zeek:id:: SSL::dtls_max_reported_version_errors - :source-code: base/init-bare.zeek 4647 4647 + :source-code: base/init-bare.zeek 4917 4917 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1500,7 +1524,7 @@ Redefinable Options Maximum number of invalid version errors to report in one DTLS connection. .. zeek:id:: SSL::dtls_max_version_errors - :source-code: base/init-bare.zeek 4644 4644 + :source-code: base/init-bare.zeek 4914 4914 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1512,7 +1536,7 @@ Redefinable Options might be interleaved in the same UDP "connection". .. zeek:id:: SSL::max_alerts_per_record - :source-code: base/init-bare.zeek 4652 4652 + :source-code: base/init-bare.zeek 4922 4922 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1523,7 +1547,7 @@ Redefinable Options TLS 1.3 connections, this is implicitly 1 as defined by RFC 8446. .. zeek:id:: Telemetry::callback_timeout - :source-code: base/init-bare.zeek 5976 5976 + :source-code: base/init-bare.zeek 6043 6043 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -1533,7 +1557,7 @@ Redefinable Options wait for metric callbacks to complete on the IO loop. .. zeek:id:: Telemetry::civetweb_threads - :source-code: base/init-bare.zeek 5979 5979 + :source-code: base/init-bare.zeek 6046 6046 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1542,7 +1566,7 @@ Redefinable Options Number of CivetWeb threads to use. .. zeek:id:: Threading::heartbeat_interval - :source-code: base/init-bare.zeek 2963 2963 + :source-code: base/init-bare.zeek 3666 3666 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -1553,7 +1577,7 @@ Redefinable Options several tests. .. zeek:id:: Tunnel::delay_gtp_confirmation - :source-code: base/init-bare.zeek 5389 5389 + :source-code: base/init-bare.zeek 678 678 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1568,7 +1592,7 @@ Redefinable Options may work better. .. zeek:id:: Tunnel::delay_teredo_confirmation - :source-code: base/init-bare.zeek 5380 5380 + :source-code: base/init-bare.zeek 669 669 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1581,7 +1605,7 @@ Redefinable Options confirmation. .. zeek:id:: Tunnel::ip_tunnel_timeout - :source-code: base/init-bare.zeek 5393 5393 + :source-code: base/init-bare.zeek 682 682 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -1591,7 +1615,7 @@ Redefinable Options (includes GRE tunnels). .. zeek:id:: Tunnel::max_changes_per_connection - :source-code: base/init-bare.zeek 449 449 + :source-code: base/init-bare.zeek 658 658 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1603,7 +1627,7 @@ Redefinable Options this limiting. .. zeek:id:: Tunnel::max_depth - :source-code: base/init-bare.zeek 5373 5373 + :source-code: base/init-bare.zeek 662 662 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1613,7 +1637,7 @@ Redefinable Options Setting this to zero will disable all types of tunnel decapsulation. .. zeek:id:: Tunnel::validate_vxlan_checksums - :source-code: base/init-bare.zeek 5399 5399 + :source-code: base/init-bare.zeek 688 688 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1625,7 +1649,7 @@ Redefinable Options may choose whether to perform the validation. .. zeek:id:: UnknownProtocol::first_bytes_count - :source-code: base/init-bare.zeek 5827 5827 + :source-code: base/init-bare.zeek 5892 5892 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1635,7 +1659,7 @@ Redefinable Options first bytes field. .. zeek:id:: UnknownProtocol::sampling_duration - :source-code: base/init-bare.zeek 5823 5823 + :source-code: base/init-bare.zeek 5888 5888 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -1646,7 +1670,7 @@ Redefinable Options before the rate-limiting for a pair expires and is reset. .. zeek:id:: UnknownProtocol::sampling_rate - :source-code: base/init-bare.zeek 5818 5818 + :source-code: base/init-bare.zeek 5883 5883 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1658,7 +1682,7 @@ Redefinable Options will disable all output of rate-limited pairs. .. zeek:id:: UnknownProtocol::sampling_threshold - :source-code: base/init-bare.zeek 5812 5812 + :source-code: base/init-bare.zeek 5877 5877 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1668,7 +1692,7 @@ Redefinable Options raise events before becoming rate-limited. .. zeek:id:: WebSocket::payload_chunk_size - :source-code: base/init-bare.zeek 469 469 + :source-code: base/init-bare.zeek 710 710 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1681,7 +1705,7 @@ Redefinable Options testing reasons. .. zeek:id:: WebSocket::use_dpd_default - :source-code: base/init-bare.zeek 472 472 + :source-code: base/init-bare.zeek 713 713 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1690,7 +1714,7 @@ Redefinable Options Whether to enable DPD on WebSocket frame payload by default. .. zeek:id:: WebSocket::use_spicy_analyzer - :source-code: base/init-bare.zeek 478 478 + :source-code: base/init-bare.zeek 719 719 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1722,7 +1746,7 @@ Redefinable Options .. zeek:id:: bits_per_uid - :source-code: base/init-bare.zeek 6149 6149 + :source-code: base/init-bare.zeek 536 536 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1733,7 +1757,7 @@ Redefinable Options The maximum is currently 128 bits. .. zeek:id:: cmd_line_bpf_filter - :source-code: base/init-bare.zeek 5171 5171 + :source-code: base/init-bare.zeek 389 389 :Type: :zeek:type:`string` :Attributes: :zeek:attr:`&redef` @@ -1742,7 +1766,7 @@ Redefinable Options BPF filter the user has set via the -f command line options. Empty if none. .. zeek:id:: detect_filtered_trace - :source-code: base/init-bare.zeek 5223 5223 + :source-code: base/init-bare.zeek 398 398 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1754,7 +1778,7 @@ Redefinable Options be reported via :zeek:see:`content_gap`. .. zeek:id:: digest_salt - :source-code: base/init-bare.zeek 6157 6157 + :source-code: base/init-bare.zeek 544 544 :Type: :zeek:type:`string` :Attributes: :zeek:attr:`&redef` @@ -1768,7 +1792,7 @@ Redefinable Options to generate installation-unique file IDs (the *id* field of :zeek:see:`fa_file`). .. zeek:id:: dns_session_timeout - :source-code: base/init-bare.zeek 1494 1494 + :source-code: base/init-bare.zeek 1760 1760 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -1777,7 +1801,7 @@ Redefinable Options Time to wait before timing out a DNS request. .. zeek:id:: dpd_buffer_size - :source-code: base/init-bare.zeek 5280 5280 + :source-code: base/init-bare.zeek 455 455 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1795,7 +1819,7 @@ Redefinable Options dpd_ignore_ports dpd_max_packets .. zeek:id:: dpd_ignore_ports - :source-code: base/init-bare.zeek 5321 5321 + :source-code: base/init-bare.zeek 496 496 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1808,7 +1832,7 @@ Redefinable Options dpd_match_only_beginning .. zeek:id:: dpd_late_match_stop - :source-code: base/init-bare.zeek 5314 5314 + :source-code: base/init-bare.zeek 489 489 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1832,7 +1856,7 @@ Redefinable Options DPD signatures only. .. zeek:id:: dpd_match_only_beginning - :source-code: base/init-bare.zeek 5302 5302 + :source-code: base/init-bare.zeek 477 477 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1854,7 +1878,7 @@ Redefinable Options only signatures used for dynamic protocol detection. .. zeek:id:: dpd_max_packets - :source-code: base/init-bare.zeek 5292 5292 + :source-code: base/init-bare.zeek 467 467 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1872,7 +1896,7 @@ Redefinable Options dpd_ignore_ports dpd_buffer_size .. zeek:id:: dpd_reassemble_first_packets - :source-code: base/init-bare.zeek 5268 5268 + :source-code: base/init-bare.zeek 443 443 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1889,7 +1913,7 @@ Redefinable Options only signatures used for dynamic protocol detection. .. zeek:id:: exit_only_after_terminate - :source-code: base/init-bare.zeek 5239 5239 + :source-code: base/init-bare.zeek 414 414 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1904,7 +1928,7 @@ Redefinable Options controlled for reproducing results. .. zeek:id:: expensive_profiling_multiple - :source-code: base/init-bare.zeek 5192 5192 + :source-code: base/init-bare.zeek 2747 2747 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -1922,7 +1946,7 @@ Redefinable Options .. zeek:see:: profiling_interval profiling_file .. zeek:id:: frag_timeout - :source-code: base/init-bare.zeek 1501 1501 + :source-code: base/init-bare.zeek 1767 1767 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -1932,7 +1956,7 @@ Redefinable Options means "forever", which resists evasion, but can lead to state accrual. .. zeek:id:: global_hash_seed - :source-code: base/init-bare.zeek 6144 6144 + :source-code: base/init-bare.zeek 531 531 :Type: :zeek:type:`string` :Attributes: :zeek:attr:`&redef` @@ -1943,7 +1967,7 @@ Redefinable Options instances. If left unset, Zeek will use a temporary local seed. .. zeek:id:: icmp_inactivity_timeout - :source-code: base/init-bare.zeek 1317 1317 + :source-code: base/init-bare.zeek 1583 1583 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -1955,7 +1979,7 @@ Redefinable Options .. zeek:see:: tcp_inactivity_timeout udp_inactivity_timeout unknown_ip_inactivity_timeout set_inactivity_timeout .. zeek:id:: ignore_checksums - :source-code: base/init-bare.zeek 1246 1246 + :source-code: base/init-bare.zeek 1512 1512 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1974,7 +1998,7 @@ Redefinable Options variable. .. zeek:id:: ignore_keep_alive_rexmit - :source-code: base/init-bare.zeek 5349 5349 + :source-code: base/init-bare.zeek 524 524 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -1989,7 +2013,7 @@ Redefinable Options .. zeek:see:: conn_stats .. zeek:id:: io_poll_interval_default - :source-code: base/init-bare.zeek 6174 6174 + :source-code: base/init-bare.zeek 561 561 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -2008,7 +2032,7 @@ Redefinable Options .. zeek:see:: io_poll_interval_live .. zeek:id:: io_poll_interval_live - :source-code: base/init-bare.zeek 6189 6189 + :source-code: base/init-bare.zeek 576 576 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -2029,7 +2053,7 @@ Redefinable Options .. zeek:see:: io_poll_interval_default .. zeek:id:: likely_server_ports - :source-code: base/init-bare.zeek 5326 5326 + :source-code: base/init-bare.zeek 501 501 :Type: :zeek:type:`set` [:zeek:type:`port`] :Attributes: :zeek:attr:`&redef` @@ -2226,7 +2250,7 @@ Redefinable Options connection if it misses the initial handshake. .. zeek:id:: log_rotate_base_time - :source-code: base/init-bare.zeek 5174 5174 + :source-code: base/init-bare.zeek 392 392 :Type: :zeek:type:`string` :Attributes: :zeek:attr:`&redef` @@ -2235,7 +2259,7 @@ Redefinable Options Base time of log rotations in 24-hour time format (``%H:%M``), e.g. "12:00". .. zeek:id:: max_analyzer_violations - :source-code: base/init-bare.zeek 2520 2520 + :source-code: base/init-bare.zeek 961 961 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -2254,7 +2278,7 @@ Redefinable Options was observed. .. zeek:id:: max_find_all_string_length - :source-code: base/init-bare.zeek 6161 6161 + :source-code: base/init-bare.zeek 548 548 :Type: :zeek:type:`int` :Attributes: :zeek:attr:`&redef` @@ -2264,7 +2288,7 @@ Redefinable Options :zeek:see:`find_all_ordered` BIFs. .. zeek:id:: max_timer_expires - :source-code: base/init-bare.zeek 2297 2297 + :source-code: base/init-bare.zeek 2563 2563 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -2276,7 +2300,7 @@ Redefinable Options "process all expired timers with each new packet". .. zeek:id:: mmdb_asn_db - :source-code: base/init-bare.zeek 1173 1173 + :source-code: base/init-bare.zeek 1439 1439 :Type: :zeek:type:`string` :Attributes: :zeek:attr:`&redef` @@ -2285,7 +2309,7 @@ Redefinable Options Default name of the MaxMind ASN database file: .. zeek:id:: mmdb_city_db - :source-code: base/init-bare.zeek 1169 1169 + :source-code: base/init-bare.zeek 1435 1435 :Type: :zeek:type:`string` :Attributes: :zeek:attr:`&redef` @@ -2294,7 +2318,7 @@ Redefinable Options Default name of the MaxMind City database file: .. zeek:id:: mmdb_country_db - :source-code: base/init-bare.zeek 1171 1171 + :source-code: base/init-bare.zeek 1437 1437 :Type: :zeek:type:`string` :Attributes: :zeek:attr:`&redef` @@ -2303,7 +2327,7 @@ Redefinable Options Default name of the MaxMind Country database file: .. zeek:id:: mmdb_dir - :source-code: base/init-bare.zeek 1166 1166 + :source-code: base/init-bare.zeek 1432 1432 :Type: :zeek:type:`string` :Attributes: :zeek:attr:`&redef` @@ -2312,7 +2336,7 @@ Redefinable Options The directory containing MaxMind DB (.mmdb) files to use for GeoIP support. .. zeek:id:: mmdb_dir_fallbacks - :source-code: base/init-bare.zeek 1180 1180 + :source-code: base/init-bare.zeek 1446 1446 :Type: :zeek:type:`vector` of :zeek:type:`string` :Attributes: :zeek:attr:`&redef` @@ -2330,7 +2354,7 @@ Redefinable Options country one. .. zeek:id:: mmdb_stale_check_interval - :source-code: base/init-bare.zeek 1190 1190 + :source-code: base/init-bare.zeek 1456 1456 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2341,7 +2365,7 @@ Redefinable Options a negative interval disables staleness checks. .. zeek:id:: non_analyzed_lifetime - :source-code: base/init-bare.zeek 1299 1299 + :source-code: base/init-bare.zeek 1565 1565 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2353,7 +2377,7 @@ Redefinable Options :zeek:see:`icmp_inactivity_timeout` still apply). .. zeek:id:: packet_filter_default - :source-code: base/init-bare.zeek 5251 5251 + :source-code: base/init-bare.zeek 426 426 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2388,7 +2412,7 @@ Redefinable Options by this many milliseconds after the last packet has been received. .. zeek:id:: partial_connection_ok - :source-code: base/init-bare.zeek 1257 1257 + :source-code: base/init-bare.zeek 1523 1523 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2398,7 +2422,7 @@ Redefinable Options (one missing its initial establishment negotiation) is seen. .. zeek:id:: peer_description - :source-code: base/init-bare.zeek 5257 5257 + :source-code: base/init-bare.zeek 432 432 :Type: :zeek:type:`string` :Attributes: :zeek:attr:`&redef` @@ -2407,7 +2431,7 @@ Redefinable Options Description transmitted to remote communication peers for identification. .. zeek:id:: pkt_profile_freq - :source-code: base/init-bare.zeek 5212 5212 + :source-code: base/init-bare.zeek 2767 2767 :Type: :zeek:type:`double` :Attributes: :zeek:attr:`&redef` @@ -2418,7 +2442,7 @@ Redefinable Options .. zeek:see:: pkt_profile_modes pkt_profile_mode pkt_profile_file .. zeek:id:: pkt_profile_mode - :source-code: base/init-bare.zeek 5207 5207 + :source-code: base/init-bare.zeek 2762 2762 :Type: :zeek:type:`pkt_profile_modes` :Attributes: :zeek:attr:`&redef` @@ -2429,7 +2453,7 @@ Redefinable Options .. zeek:see:: pkt_profile_modes pkt_profile_freq pkt_profile_file .. zeek:id:: profiling_interval - :source-code: base/init-bare.zeek 5186 5186 + :source-code: base/init-bare.zeek 2741 2741 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2447,7 +2471,7 @@ Redefinable Options .. zeek:see:: profiling_file expensive_profiling_multiple .. zeek:id:: record_all_packets - :source-code: base/init-bare.zeek 5340 5340 + :source-code: base/init-bare.zeek 515 515 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2462,7 +2486,7 @@ Redefinable Options .. zeek:see:: trace_output_file .. zeek:id:: report_gaps_for_partial - :source-code: base/init-bare.zeek 5230 5230 + :source-code: base/init-bare.zeek 405 405 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2475,7 +2499,7 @@ Redefinable Options .. zeek:see:: content_gap partial_connection .. zeek:id:: rpc_timeout - :source-code: base/init-bare.zeek 1497 1497 + :source-code: base/init-bare.zeek 1763 1763 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2484,7 +2508,7 @@ Redefinable Options Time to wait before timing out an RPC request. .. zeek:id:: running_under_test - :source-code: base/init-bare.zeek 6193 6193 + :source-code: base/init-bare.zeek 580 580 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2494,7 +2518,7 @@ Redefinable Options while testing, but should be used sparingly. .. zeek:id:: sig_max_group_size - :source-code: base/init-bare.zeek 5254 5254 + :source-code: base/init-bare.zeek 429 429 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -2503,7 +2527,7 @@ Redefinable Options Maximum size of regular expression groups for signature matching. .. zeek:id:: skip_http_data - :source-code: base/init-bare.zeek 4370 4370 + :source-code: base/init-bare.zeek 3087 3087 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2515,7 +2539,7 @@ Redefinable Options .. zeek:see:: http_entity_data skip_http_entity_data http_entity_data_delivery_size .. zeek:id:: table_expire_delay - :source-code: base/init-bare.zeek 1491 1491 + :source-code: base/init-bare.zeek 1757 1757 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2527,7 +2551,7 @@ Redefinable Options .. zeek:see:: table_expire_interval table_incremental_step .. zeek:id:: table_expire_interval - :source-code: base/init-bare.zeek 1479 1479 + :source-code: base/init-bare.zeek 1745 1745 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2550,7 +2574,7 @@ Redefinable Options .. zeek:see:: table_incremental_step table_expire_delay .. zeek:id:: table_incremental_step - :source-code: base/init-bare.zeek 1485 1485 + :source-code: base/init-bare.zeek 1751 1751 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -2562,7 +2586,7 @@ Redefinable Options .. zeek:see:: table_expire_interval table_expire_delay .. zeek:id:: tcp_SYN_ack_ok - :source-code: base/init-bare.zeek 1261 1261 + :source-code: base/init-bare.zeek 1527 1527 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2572,7 +2596,7 @@ Redefinable Options initial SYN (even if :zeek:see:`partial_connection_ok` is false). .. zeek:id:: tcp_SYN_timeout - :source-code: base/init-bare.zeek 1269 1269 + :source-code: base/init-bare.zeek 1535 1535 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2581,7 +2605,7 @@ Redefinable Options Check up on the result of an initial SYN after this much time. .. zeek:id:: tcp_attempt_delay - :source-code: base/init-bare.zeek 1282 1282 + :source-code: base/init-bare.zeek 1548 1548 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2591,7 +2615,7 @@ Redefinable Options connection attempt. .. zeek:id:: tcp_close_delay - :source-code: base/init-bare.zeek 1285 1285 + :source-code: base/init-bare.zeek 1551 1551 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2600,7 +2624,7 @@ Redefinable Options Upon seeing a normal connection close, flush state after this much time. .. zeek:id:: tcp_connection_linger - :source-code: base/init-bare.zeek 1278 1278 + :source-code: base/init-bare.zeek 1544 1544 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2611,7 +2635,7 @@ Redefinable Options connection is reused before this much time has elapsed. .. zeek:id:: tcp_content_deliver_all_orig - :source-code: base/init-bare.zeek 1404 1404 + :source-code: base/init-bare.zeek 1670 1670 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2626,7 +2650,7 @@ Redefinable Options udp_content_deliver_all_resp tcp_contents .. zeek:id:: tcp_content_deliver_all_resp - :source-code: base/init-bare.zeek 1414 1414 + :source-code: base/init-bare.zeek 1680 1680 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2642,7 +2666,7 @@ Redefinable Options udp_content_deliver_all_resp tcp_contents .. zeek:id:: tcp_content_delivery_ports_orig - :source-code: base/init-bare.zeek 1386 1386 + :source-code: base/init-bare.zeek 1652 1652 :Type: :zeek:type:`table` [:zeek:type:`port`] of :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2657,7 +2681,7 @@ Redefinable Options udp_content_deliver_all_resp tcp_contents .. zeek:id:: tcp_content_delivery_ports_resp - :source-code: base/init-bare.zeek 1395 1395 + :source-code: base/init-bare.zeek 1661 1661 :Type: :zeek:type:`table` [:zeek:type:`port`] of :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2672,7 +2696,7 @@ Redefinable Options udp_content_deliver_all_resp tcp_contents .. zeek:id:: tcp_excessive_data_without_further_acks - :source-code: base/init-bare.zeek 1360 1360 + :source-code: base/init-bare.zeek 1626 1626 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -2687,7 +2711,7 @@ Redefinable Options .. zeek:see:: tcp_max_initial_window tcp_max_above_hole_without_any_acks .. zeek:id:: tcp_inactivity_timeout - :source-code: base/init-bare.zeek 1305 1305 + :source-code: base/init-bare.zeek 1571 1571 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2699,7 +2723,7 @@ Redefinable Options .. zeek:see:: udp_inactivity_timeout icmp_inactivity_timeout unknown_ip_inactivity_timeout set_inactivity_timeout .. zeek:id:: tcp_match_undelivered - :source-code: base/init-bare.zeek 1266 1266 + :source-code: base/init-bare.zeek 1532 1532 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2710,7 +2734,7 @@ Redefinable Options reassembler. .. zeek:id:: tcp_max_above_hole_without_any_acks - :source-code: base/init-bare.zeek 1351 1351 + :source-code: base/init-bare.zeek 1617 1617 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -2724,7 +2748,7 @@ Redefinable Options .. zeek:see:: tcp_max_initial_window tcp_excessive_data_without_further_acks .. zeek:id:: tcp_max_initial_window - :source-code: base/init-bare.zeek 1343 1343 + :source-code: base/init-bare.zeek 1609 1609 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -2737,7 +2761,7 @@ Redefinable Options .. zeek:see:: tcp_max_above_hole_without_any_acks tcp_excessive_data_without_further_acks .. zeek:id:: tcp_max_old_segments - :source-code: base/init-bare.zeek 1365 1365 + :source-code: base/init-bare.zeek 1631 1631 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -2748,7 +2772,7 @@ Redefinable Options buffering. .. zeek:id:: tcp_partial_close_delay - :source-code: base/init-bare.zeek 1293 1293 + :source-code: base/init-bare.zeek 1559 1559 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2759,7 +2783,7 @@ Redefinable Options activity. .. zeek:id:: tcp_reassembler_ports_orig - :source-code: base/init-bare.zeek 1371 1371 + :source-code: base/init-bare.zeek 1637 1637 :Type: :zeek:type:`set` [:zeek:type:`port`] :Attributes: :zeek:attr:`&redef` :zeek:attr:`&deprecated` = *"Remove in v8.1. Non-functional since v4.1"* @@ -2771,7 +2795,7 @@ Redefinable Options .. zeek:see:: tcp_reassembler_ports_resp .. zeek:id:: tcp_reassembler_ports_resp - :source-code: base/init-bare.zeek 1377 1377 + :source-code: base/init-bare.zeek 1643 1643 :Type: :zeek:type:`set` [:zeek:type:`port`] :Attributes: :zeek:attr:`&redef` :zeek:attr:`&deprecated` = *"Remove in v8.1. Non-functional since v4.1"* @@ -2783,7 +2807,7 @@ Redefinable Options .. zeek:see:: tcp_reassembler_ports_orig .. zeek:id:: tcp_reset_delay - :source-code: base/init-bare.zeek 1288 1288 + :source-code: base/init-bare.zeek 1554 1554 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2792,7 +2816,7 @@ Redefinable Options Upon seeing a RST, flush state after this much time. .. zeek:id:: tcp_session_timer - :source-code: base/init-bare.zeek 1273 1273 + :source-code: base/init-bare.zeek 1539 1539 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2802,7 +2826,7 @@ Redefinable Options before checking whether to time out its state. .. zeek:id:: tcp_storm_interarrival_thresh - :source-code: base/init-bare.zeek 1336 1336 + :source-code: base/init-bare.zeek 1602 1602 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2814,7 +2838,7 @@ Redefinable Options .. zeek:see:: tcp_storm_thresh .. zeek:id:: tcp_storm_thresh - :source-code: base/init-bare.zeek 1330 1330 + :source-code: base/init-bare.zeek 1596 1596 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -2827,7 +2851,7 @@ Redefinable Options .. zeek:see:: tcp_storm_interarrival_thresh .. zeek:id:: truncate_http_URI - :source-code: base/init-bare.zeek 4377 4377 + :source-code: base/init-bare.zeek 3094 3094 :Type: :zeek:type:`int` :Attributes: :zeek:attr:`&redef` @@ -2840,7 +2864,7 @@ Redefinable Options .. zeek:see:: http_request .. zeek:id:: udp_content_deliver_all_orig - :source-code: base/init-bare.zeek 1463 1463 + :source-code: base/init-bare.zeek 1729 1729 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2857,7 +2881,7 @@ Redefinable Options udp_content_delivery_ports_use_resp .. zeek:id:: udp_content_deliver_all_resp - :source-code: base/init-bare.zeek 1474 1474 + :source-code: base/init-bare.zeek 1740 1740 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2874,7 +2898,7 @@ Redefinable Options udp_content_delivery_ports_use_resp .. zeek:id:: udp_content_delivery_ports_orig - :source-code: base/init-bare.zeek 1425 1425 + :source-code: base/init-bare.zeek 1691 1691 :Type: :zeek:type:`table` [:zeek:type:`port`] of :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2891,7 +2915,7 @@ Redefinable Options udp_content_delivery_ports_use_resp udp_content_ports .. zeek:id:: udp_content_delivery_ports_resp - :source-code: base/init-bare.zeek 1435 1435 + :source-code: base/init-bare.zeek 1701 1701 :Type: :zeek:type:`table` [:zeek:type:`port`] of :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2907,7 +2931,7 @@ Redefinable Options udp_content_delivery_ports_use_resp udp_content_ports .. zeek:id:: udp_inactivity_timeout - :source-code: base/init-bare.zeek 1311 1311 + :source-code: base/init-bare.zeek 1577 1577 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2919,7 +2943,7 @@ Redefinable Options .. zeek:see:: tcp_inactivity_timeout icmp_inactivity_timeout unknown_ip_inactivity_timeout set_inactivity_timeout .. zeek:id:: unknown_ip_inactivity_timeout - :source-code: base/init-bare.zeek 1323 1323 + :source-code: base/init-bare.zeek 1589 1589 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2931,7 +2955,7 @@ Redefinable Options .. zeek:see:: tcp_inactivity_timeout udp_inactivity_timeout icmp_inactivity_timeout set_inactivity_timeout .. zeek:id:: use_conn_size_analyzer - :source-code: base/init-bare.zeek 1506 1506 + :source-code: base/init-bare.zeek 1772 1772 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -2942,7 +2966,7 @@ Redefinable Options returned in the connection's :zeek:see:`endpoint` record value. .. zeek:id:: watchdog_interval - :source-code: base/init-bare.zeek 2291 2291 + :source-code: base/init-bare.zeek 2557 2557 :Type: :zeek:type:`interval` :Attributes: :zeek:attr:`&redef` @@ -2953,7 +2977,7 @@ Redefinable Options Constants ######### .. zeek:id:: CONTENTS_BOTH - :source-code: base/init-bare.zeek 1519 1519 + :source-code: base/init-bare.zeek 1785 1785 :Type: :zeek:type:`count` :Default: ``3`` @@ -2961,7 +2985,7 @@ Constants Record both originator and responder contents. .. zeek:id:: CONTENTS_NONE - :source-code: base/init-bare.zeek 1516 1516 + :source-code: base/init-bare.zeek 1782 1782 :Type: :zeek:type:`count` :Default: ``0`` @@ -2969,7 +2993,7 @@ Constants Turn off recording of contents. .. zeek:id:: CONTENTS_ORIG - :source-code: base/init-bare.zeek 1517 1517 + :source-code: base/init-bare.zeek 1783 1783 :Type: :zeek:type:`count` :Default: ``1`` @@ -2977,7 +3001,7 @@ Constants Record originator contents. .. zeek:id:: CONTENTS_RESP - :source-code: base/init-bare.zeek 1518 1518 + :source-code: base/init-bare.zeek 1784 1784 :Type: :zeek:type:`count` :Default: ``2`` @@ -2985,7 +3009,7 @@ Constants Record responder contents. .. zeek:id:: DNS_ADDL - :source-code: base/init-bare.zeek 4290 4290 + :source-code: base/init-bare.zeek 3007 3007 :Type: :zeek:type:`count` :Default: ``3`` @@ -2993,7 +3017,7 @@ Constants An additional record. .. zeek:id:: DNS_ANS - :source-code: base/init-bare.zeek 4288 4288 + :source-code: base/init-bare.zeek 3005 3005 :Type: :zeek:type:`count` :Default: ``1`` @@ -3001,7 +3025,7 @@ Constants An answer record. .. zeek:id:: DNS_AUTH - :source-code: base/init-bare.zeek 4289 4289 + :source-code: base/init-bare.zeek 3006 3006 :Type: :zeek:type:`count` :Default: ``2`` @@ -3009,7 +3033,7 @@ Constants An authoritative record. .. zeek:id:: DNS_QUERY - :source-code: base/init-bare.zeek 4287 4287 + :source-code: base/init-bare.zeek 3004 3004 :Type: :zeek:type:`count` :Default: ``0`` @@ -3017,7 +3041,7 @@ Constants A query. This shouldn't occur, just for completeness. .. zeek:id:: ENDIAN_BIG - :source-code: base/init-bare.zeek 1511 1511 + :source-code: base/init-bare.zeek 1777 1777 :Type: :zeek:type:`count` :Default: ``2`` @@ -3025,7 +3049,7 @@ Constants Big endian. .. zeek:id:: ENDIAN_CONFUSED - :source-code: base/init-bare.zeek 1512 1512 + :source-code: base/init-bare.zeek 1778 1778 :Type: :zeek:type:`count` :Default: ``3`` @@ -3033,7 +3057,7 @@ Constants Tried to determine endian, but failed. .. zeek:id:: ENDIAN_LITTLE - :source-code: base/init-bare.zeek 1510 1510 + :source-code: base/init-bare.zeek 1776 1776 :Type: :zeek:type:`count` :Default: ``1`` @@ -3041,7 +3065,7 @@ Constants Little endian. .. zeek:id:: ENDIAN_UNKNOWN - :source-code: base/init-bare.zeek 1509 1509 + :source-code: base/init-bare.zeek 1775 1775 :Type: :zeek:type:`count` :Default: ``0`` @@ -3049,7 +3073,7 @@ Constants Endian not yet determined. .. zeek:id:: ICMP_UNREACH_ADMIN_PROHIB - :source-code: base/init-bare.zeek 1530 1530 + :source-code: base/init-bare.zeek 1796 1796 :Type: :zeek:type:`count` :Default: ``13`` @@ -3057,7 +3081,7 @@ Constants Administratively prohibited. .. zeek:id:: ICMP_UNREACH_HOST - :source-code: base/init-bare.zeek 1526 1526 + :source-code: base/init-bare.zeek 1792 1792 :Type: :zeek:type:`count` :Default: ``1`` @@ -3065,7 +3089,7 @@ Constants Host unreachable. .. zeek:id:: ICMP_UNREACH_NEEDFRAG - :source-code: base/init-bare.zeek 1529 1529 + :source-code: base/init-bare.zeek 1795 1795 :Type: :zeek:type:`count` :Default: ``4`` @@ -3073,7 +3097,7 @@ Constants Fragment needed. .. zeek:id:: ICMP_UNREACH_NET - :source-code: base/init-bare.zeek 1525 1525 + :source-code: base/init-bare.zeek 1791 1791 :Type: :zeek:type:`count` :Default: ``0`` @@ -3081,7 +3105,7 @@ Constants Network unreachable. .. zeek:id:: ICMP_UNREACH_PORT - :source-code: base/init-bare.zeek 1528 1528 + :source-code: base/init-bare.zeek 1794 1794 :Type: :zeek:type:`count` :Default: ``3`` @@ -3089,7 +3113,7 @@ Constants Port unreachable. .. zeek:id:: ICMP_UNREACH_PROTOCOL - :source-code: base/init-bare.zeek 1527 1527 + :source-code: base/init-bare.zeek 1793 1793 :Type: :zeek:type:`count` :Default: ``2`` @@ -3097,7 +3121,7 @@ Constants Protocol unreachable. .. zeek:id:: IPPROTO_AH - :source-code: base/init-bare.zeek 1550 1550 + :source-code: base/init-bare.zeek 1816 1816 :Type: :zeek:type:`count` :Default: ``51`` @@ -3105,7 +3129,7 @@ Constants IPv6 authentication header. .. zeek:id:: IPPROTO_DSTOPTS - :source-code: base/init-bare.zeek 1552 1552 + :source-code: base/init-bare.zeek 1818 1818 :Type: :zeek:type:`count` :Default: ``60`` @@ -3113,7 +3137,7 @@ Constants IPv6 destination options header. .. zeek:id:: IPPROTO_ESP - :source-code: base/init-bare.zeek 1549 1549 + :source-code: base/init-bare.zeek 1815 1815 :Type: :zeek:type:`count` :Default: ``50`` @@ -3121,7 +3145,7 @@ Constants IPv6 encapsulating security payload header. .. zeek:id:: IPPROTO_FRAGMENT - :source-code: base/init-bare.zeek 1548 1548 + :source-code: base/init-bare.zeek 1814 1814 :Type: :zeek:type:`count` :Default: ``44`` @@ -3129,7 +3153,7 @@ Constants IPv6 fragment header. .. zeek:id:: IPPROTO_HOPOPTS - :source-code: base/init-bare.zeek 1546 1546 + :source-code: base/init-bare.zeek 1812 1812 :Type: :zeek:type:`count` :Default: ``0`` @@ -3137,7 +3161,7 @@ Constants IPv6 hop-by-hop-options header. .. zeek:id:: IPPROTO_ICMP - :source-code: base/init-bare.zeek 1536 1536 + :source-code: base/init-bare.zeek 1802 1802 :Type: :zeek:type:`count` :Default: ``1`` @@ -3145,7 +3169,7 @@ Constants Control message protocol. .. zeek:id:: IPPROTO_ICMPV6 - :source-code: base/init-bare.zeek 1542 1542 + :source-code: base/init-bare.zeek 1808 1808 :Type: :zeek:type:`count` :Default: ``58`` @@ -3153,7 +3177,7 @@ Constants ICMP for IPv6. .. zeek:id:: IPPROTO_IGMP - :source-code: base/init-bare.zeek 1537 1537 + :source-code: base/init-bare.zeek 1803 1803 :Type: :zeek:type:`count` :Default: ``2`` @@ -3161,7 +3185,7 @@ Constants Group management protocol. .. zeek:id:: IPPROTO_IP - :source-code: base/init-bare.zeek 1535 1535 + :source-code: base/init-bare.zeek 1801 1801 :Type: :zeek:type:`count` :Default: ``0`` @@ -3169,7 +3193,7 @@ Constants Dummy for IP. .. zeek:id:: IPPROTO_IPIP - :source-code: base/init-bare.zeek 1538 1538 + :source-code: base/init-bare.zeek 1804 1804 :Type: :zeek:type:`count` :Default: ``4`` @@ -3177,7 +3201,7 @@ Constants IP encapsulation in IP. .. zeek:id:: IPPROTO_IPV6 - :source-code: base/init-bare.zeek 1541 1541 + :source-code: base/init-bare.zeek 1807 1807 :Type: :zeek:type:`count` :Default: ``41`` @@ -3185,7 +3209,7 @@ Constants IPv6 header. .. zeek:id:: IPPROTO_MOBILITY - :source-code: base/init-bare.zeek 1553 1553 + :source-code: base/init-bare.zeek 1819 1819 :Type: :zeek:type:`count` :Default: ``135`` @@ -3193,7 +3217,7 @@ Constants IPv6 mobility header. .. zeek:id:: IPPROTO_NONE - :source-code: base/init-bare.zeek 1551 1551 + :source-code: base/init-bare.zeek 1817 1817 :Type: :zeek:type:`count` :Default: ``59`` @@ -3201,7 +3225,7 @@ Constants IPv6 no next header. .. zeek:id:: IPPROTO_RAW - :source-code: base/init-bare.zeek 1543 1543 + :source-code: base/init-bare.zeek 1809 1809 :Type: :zeek:type:`count` :Default: ``255`` @@ -3209,7 +3233,7 @@ Constants Raw IP packet. .. zeek:id:: IPPROTO_ROUTING - :source-code: base/init-bare.zeek 1547 1547 + :source-code: base/init-bare.zeek 1813 1813 :Type: :zeek:type:`count` :Default: ``43`` @@ -3217,7 +3241,7 @@ Constants IPv6 routing header. .. zeek:id:: IPPROTO_TCP - :source-code: base/init-bare.zeek 1539 1539 + :source-code: base/init-bare.zeek 1805 1805 :Type: :zeek:type:`count` :Default: ``6`` @@ -3225,7 +3249,7 @@ Constants TCP. .. zeek:id:: IPPROTO_UDP - :source-code: base/init-bare.zeek 1540 1540 + :source-code: base/init-bare.zeek 1806 1806 :Type: :zeek:type:`count` :Default: ``17`` @@ -3233,35 +3257,35 @@ Constants User datagram protocol. .. zeek:id:: LOGIN_STATE_AUTHENTICATE - :source-code: base/init-bare.zeek 2304 2304 + :source-code: base/init-bare.zeek 2570 2570 :Type: :zeek:type:`count` :Default: ``0`` .. zeek:id:: LOGIN_STATE_CONFUSED - :source-code: base/init-bare.zeek 2307 2307 + :source-code: base/init-bare.zeek 2573 2573 :Type: :zeek:type:`count` :Default: ``3`` .. zeek:id:: LOGIN_STATE_LOGGED_IN - :source-code: base/init-bare.zeek 2305 2305 + :source-code: base/init-bare.zeek 2571 2571 :Type: :zeek:type:`count` :Default: ``1`` .. zeek:id:: LOGIN_STATE_SKIP - :source-code: base/init-bare.zeek 2306 2306 + :source-code: base/init-bare.zeek 2572 2572 :Type: :zeek:type:`count` :Default: ``2`` .. zeek:id:: RPC_status - :source-code: base/init-bare.zeek 2453 2453 + :source-code: base/init-bare.zeek 2719 2719 :Type: :zeek:type:`table` [:zeek:type:`rpc_status`] of :zeek:type:`string` :Default: @@ -3287,7 +3311,7 @@ Constants pm_attempt_null pm_attempt_set pm_attempt_unset rpc_dialogue rpc_reply .. zeek:id:: SNMP::OBJ_COUNTER32_TAG - :source-code: base/init-bare.zeek 4933 4933 + :source-code: base/init-bare.zeek 5206 5206 :Type: :zeek:type:`count` :Default: ``65`` @@ -3295,7 +3319,7 @@ Constants Unsigned 32-bit integer. .. zeek:id:: SNMP::OBJ_COUNTER64_TAG - :source-code: base/init-bare.zeek 4937 4937 + :source-code: base/init-bare.zeek 5210 5210 :Type: :zeek:type:`count` :Default: ``70`` @@ -3303,7 +3327,7 @@ Constants Unsigned 64-bit integer. .. zeek:id:: SNMP::OBJ_ENDOFMIBVIEW_TAG - :source-code: base/init-bare.zeek 4940 4940 + :source-code: base/init-bare.zeek 5213 5213 :Type: :zeek:type:`count` :Default: ``130`` @@ -3311,7 +3335,7 @@ Constants A NULL value. .. zeek:id:: SNMP::OBJ_INTEGER_TAG - :source-code: base/init-bare.zeek 4928 4928 + :source-code: base/init-bare.zeek 5201 5201 :Type: :zeek:type:`count` :Default: ``2`` @@ -3319,7 +3343,7 @@ Constants Signed 64-bit integer. .. zeek:id:: SNMP::OBJ_IPADDRESS_TAG - :source-code: base/init-bare.zeek 4932 4932 + :source-code: base/init-bare.zeek 5205 5205 :Type: :zeek:type:`count` :Default: ``64`` @@ -3327,7 +3351,7 @@ Constants An IP address. .. zeek:id:: SNMP::OBJ_NOSUCHINSTANCE_TAG - :source-code: base/init-bare.zeek 4939 4939 + :source-code: base/init-bare.zeek 5212 5212 :Type: :zeek:type:`count` :Default: ``129`` @@ -3335,7 +3359,7 @@ Constants A NULL value. .. zeek:id:: SNMP::OBJ_NOSUCHOBJECT_TAG - :source-code: base/init-bare.zeek 4938 4938 + :source-code: base/init-bare.zeek 5211 5211 :Type: :zeek:type:`count` :Default: ``128`` @@ -3343,7 +3367,7 @@ Constants A NULL value. .. zeek:id:: SNMP::OBJ_OCTETSTRING_TAG - :source-code: base/init-bare.zeek 4929 4929 + :source-code: base/init-bare.zeek 5202 5202 :Type: :zeek:type:`count` :Default: ``4`` @@ -3351,7 +3375,7 @@ Constants An octet string. .. zeek:id:: SNMP::OBJ_OID_TAG - :source-code: base/init-bare.zeek 4931 4931 + :source-code: base/init-bare.zeek 5204 5204 :Type: :zeek:type:`count` :Default: ``6`` @@ -3359,7 +3383,7 @@ Constants An Object Identifier. .. zeek:id:: SNMP::OBJ_OPAQUE_TAG - :source-code: base/init-bare.zeek 4936 4936 + :source-code: base/init-bare.zeek 5209 5209 :Type: :zeek:type:`count` :Default: ``68`` @@ -3367,7 +3391,7 @@ Constants An octet string. .. zeek:id:: SNMP::OBJ_TIMETICKS_TAG - :source-code: base/init-bare.zeek 4935 4935 + :source-code: base/init-bare.zeek 5208 5208 :Type: :zeek:type:`count` :Default: ``67`` @@ -3375,7 +3399,7 @@ Constants Unsigned 32-bit integer. .. zeek:id:: SNMP::OBJ_UNSIGNED32_TAG - :source-code: base/init-bare.zeek 4934 4934 + :source-code: base/init-bare.zeek 5207 5207 :Type: :zeek:type:`count` :Default: ``66`` @@ -3383,7 +3407,7 @@ Constants Unsigned 32-bit integer. .. zeek:id:: SNMP::OBJ_UNSPECIFIED_TAG - :source-code: base/init-bare.zeek 4930 4930 + :source-code: base/init-bare.zeek 5203 5203 :Type: :zeek:type:`count` :Default: ``5`` @@ -3391,7 +3415,7 @@ Constants A NULL value. .. zeek:id:: TCP_CLOSED - :source-code: base/init-bare.zeek 1227 1227 + :source-code: base/init-bare.zeek 1493 1493 :Type: :zeek:type:`count` :Default: ``5`` @@ -3399,7 +3423,7 @@ Constants Endpoint has closed connection. .. zeek:id:: TCP_ESTABLISHED - :source-code: base/init-bare.zeek 1226 1226 + :source-code: base/init-bare.zeek 1492 1492 :Type: :zeek:type:`count` :Default: ``4`` @@ -3407,7 +3431,7 @@ Constants Endpoint has finished initial handshake regularly. .. zeek:id:: TCP_INACTIVE - :source-code: base/init-bare.zeek 1222 1222 + :source-code: base/init-bare.zeek 1488 1488 :Type: :zeek:type:`count` :Default: ``0`` @@ -3415,7 +3439,7 @@ Constants Endpoint is still inactive. .. zeek:id:: TCP_PARTIAL - :source-code: base/init-bare.zeek 1225 1225 + :source-code: base/init-bare.zeek 1491 1491 :Type: :zeek:type:`count` :Default: ``3`` @@ -3423,7 +3447,7 @@ Constants Endpoint has sent data but no initial SYN. .. zeek:id:: TCP_RESET - :source-code: base/init-bare.zeek 1228 1228 + :source-code: base/init-bare.zeek 1494 1494 :Type: :zeek:type:`count` :Default: ``6`` @@ -3431,7 +3455,7 @@ Constants Endpoint has sent RST. .. zeek:id:: TCP_SYN_ACK_SENT - :source-code: base/init-bare.zeek 1224 1224 + :source-code: base/init-bare.zeek 1490 1490 :Type: :zeek:type:`count` :Default: ``2`` @@ -3439,7 +3463,7 @@ Constants Endpoint has sent SYN/ACK. .. zeek:id:: TCP_SYN_SENT - :source-code: base/init-bare.zeek 1223 1223 + :source-code: base/init-bare.zeek 1489 1489 :Type: :zeek:type:`count` :Default: ``1`` @@ -3447,7 +3471,7 @@ Constants Endpoint has sent SYN. .. zeek:id:: TH_ACK - :source-code: base/init-bare.zeek 1881 1881 + :source-code: base/init-bare.zeek 2147 2147 :Type: :zeek:type:`count` :Default: ``16`` @@ -3455,7 +3479,7 @@ Constants ACK. .. zeek:id:: TH_FIN - :source-code: base/init-bare.zeek 1877 1877 + :source-code: base/init-bare.zeek 2143 2143 :Type: :zeek:type:`count` :Default: ``1`` @@ -3463,7 +3487,7 @@ Constants FIN. .. zeek:id:: TH_FLAGS - :source-code: base/init-bare.zeek 1883 1883 + :source-code: base/init-bare.zeek 2149 2149 :Type: :zeek:type:`count` :Default: ``63`` @@ -3471,7 +3495,7 @@ Constants Mask combining all flags. .. zeek:id:: TH_PUSH - :source-code: base/init-bare.zeek 1880 1880 + :source-code: base/init-bare.zeek 2146 2146 :Type: :zeek:type:`count` :Default: ``8`` @@ -3479,7 +3503,7 @@ Constants PUSH. .. zeek:id:: TH_RST - :source-code: base/init-bare.zeek 1879 1879 + :source-code: base/init-bare.zeek 2145 2145 :Type: :zeek:type:`count` :Default: ``4`` @@ -3487,7 +3511,7 @@ Constants RST. .. zeek:id:: TH_SYN - :source-code: base/init-bare.zeek 1878 1878 + :source-code: base/init-bare.zeek 2144 2144 :Type: :zeek:type:`count` :Default: ``2`` @@ -3495,7 +3519,7 @@ Constants SYN. .. zeek:id:: TH_URG - :source-code: base/init-bare.zeek 1882 1882 + :source-code: base/init-bare.zeek 2148 2148 :Type: :zeek:type:`count` :Default: ``32`` @@ -3503,7 +3527,7 @@ Constants URG. .. zeek:id:: UDP_ACTIVE - :source-code: base/init-bare.zeek 1233 1233 + :source-code: base/init-bare.zeek 1499 1499 :Type: :zeek:type:`count` :Default: ``1`` @@ -3511,7 +3535,7 @@ Constants Endpoint has sent something. .. zeek:id:: UDP_INACTIVE - :source-code: base/init-bare.zeek 1232 1232 + :source-code: base/init-bare.zeek 1498 1498 :Type: :zeek:type:`count` :Default: ``0`` @@ -3519,7 +3543,7 @@ Constants Endpoint is still inactive. .. zeek:id:: trace_output_file - :source-code: base/init-bare.zeek 5331 5331 + :source-code: base/init-bare.zeek 506 506 :Type: :zeek:type:`string` :Default: ``""`` @@ -3529,7 +3553,7 @@ Constants .. zeek:see:: record_all_packets .. zeek:id:: zeek_script_args - :source-code: base/init-bare.zeek 588 588 + :source-code: base/init-bare.zeek 386 386 :Type: :zeek:type:`vector` of :zeek:type:`string` :Default: @@ -3553,7 +3577,7 @@ Constants State Variables ############### .. zeek:id:: capture_filters - :source-code: base/init-bare.zeek 1044 1044 + :source-code: base/init-bare.zeek 1310 1310 :Type: :zeek:type:`table` [:zeek:type:`string`] of :zeek:type:`string` :Attributes: :zeek:attr:`&redef` @@ -3569,7 +3593,7 @@ State Variables PacketFilter::unrestricted_filter restrict_filters .. zeek:id:: direct_login_prompts - :source-code: base/init-bare.zeek 2364 2364 + :source-code: base/init-bare.zeek 2630 2630 :Type: :zeek:type:`set` [:zeek:type:`string`] :Attributes: :zeek:attr:`&redef` @@ -3578,7 +3602,7 @@ State Variables TODO. .. zeek:id:: discarder_maxlen - :source-code: base/init-bare.zeek 2220 2220 + :source-code: base/init-bare.zeek 2486 2486 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -3590,7 +3614,7 @@ State Variables discarder_check_ip .. zeek:id:: dns_max_queries - :source-code: base/init-bare.zeek 4331 4331 + :source-code: base/init-bare.zeek 3048 3048 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -3600,7 +3624,7 @@ State Variables traffic and do not process it. Set to 0 to turn off this functionality. .. zeek:id:: dns_skip_addl - :source-code: base/init-bare.zeek 4317 4317 + :source-code: base/init-bare.zeek 3034 3034 :Type: :zeek:type:`set` [:zeek:type:`addr`] :Attributes: :zeek:attr:`&redef` @@ -3612,7 +3636,7 @@ State Variables .. zeek:see:: dns_skip_all_addl dns_skip_auth .. zeek:id:: dns_skip_all_addl - :source-code: base/init-bare.zeek 4327 4327 + :source-code: base/init-bare.zeek 3044 3044 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -3629,7 +3653,7 @@ State Variables .. zeek:see:: dns_skip_all_auth dns_skip_addl .. zeek:id:: dns_skip_all_auth - :source-code: base/init-bare.zeek 4322 4322 + :source-code: base/init-bare.zeek 3039 3039 :Type: :zeek:type:`bool` :Attributes: :zeek:attr:`&redef` @@ -3646,7 +3670,7 @@ State Variables .. zeek:see:: dns_skip_all_addl dns_skip_auth .. zeek:id:: dns_skip_auth - :source-code: base/init-bare.zeek 4311 4311 + :source-code: base/init-bare.zeek 3028 3028 :Type: :zeek:type:`set` [:zeek:type:`addr`] :Attributes: :zeek:attr:`&redef` @@ -3658,14 +3682,14 @@ State Variables .. zeek:see:: dns_skip_all_auth dns_skip_addl .. zeek:id:: done_with_network - :source-code: base/init-bare.zeek 6195 6195 + :source-code: base/init-bare.zeek 6210 6210 :Type: :zeek:type:`bool` :Default: ``F`` .. zeek:id:: http_entity_data_delivery_size - :source-code: base/init-bare.zeek 4364 4364 + :source-code: base/init-bare.zeek 3081 3081 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -3676,7 +3700,7 @@ State Variables .. zeek:see:: http_entity_data skip_http_entity_data skip_http_data .. zeek:id:: interfaces - :source-code: base/init-bare.zeek 2193 2193 + :source-code: base/init-bare.zeek 2459 2459 :Type: :zeek:type:`string` :Attributes: :zeek:attr:`&add_func` = :zeek:see:`add_interface` :zeek:attr:`&redef` @@ -3686,7 +3710,7 @@ State Variables extend. .. zeek:id:: login_failure_msgs - :source-code: base/init-bare.zeek 2373 2373 + :source-code: base/init-bare.zeek 2639 2639 :Type: :zeek:type:`set` [:zeek:type:`string`] :Attributes: :zeek:attr:`&redef` @@ -3695,7 +3719,7 @@ State Variables TODO. .. zeek:id:: login_non_failure_msgs - :source-code: base/init-bare.zeek 2370 2370 + :source-code: base/init-bare.zeek 2636 2636 :Type: :zeek:type:`set` [:zeek:type:`string`] :Attributes: :zeek:attr:`&redef` @@ -3704,7 +3728,7 @@ State Variables TODO. .. zeek:id:: login_prompts - :source-code: base/init-bare.zeek 2367 2367 + :source-code: base/init-bare.zeek 2633 2633 :Type: :zeek:type:`set` [:zeek:type:`string`] :Attributes: :zeek:attr:`&redef` @@ -3713,7 +3737,7 @@ State Variables TODO. .. zeek:id:: login_success_msgs - :source-code: base/init-bare.zeek 2376 2376 + :source-code: base/init-bare.zeek 2642 2642 :Type: :zeek:type:`set` [:zeek:type:`string`] :Attributes: :zeek:attr:`&redef` @@ -3722,7 +3746,7 @@ State Variables TODO. .. zeek:id:: login_timeouts - :source-code: base/init-bare.zeek 2379 2379 + :source-code: base/init-bare.zeek 2645 2645 :Type: :zeek:type:`set` [:zeek:type:`string`] :Attributes: :zeek:attr:`&redef` @@ -3731,7 +3755,7 @@ State Variables TODO. .. zeek:id:: mime_segment_length - :source-code: base/init-bare.zeek 2399 2399 + :source-code: base/init-bare.zeek 2665 2665 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -3743,7 +3767,7 @@ State Variables .. zeek:see:: mime_segment_data mime_segment_overlap_length .. zeek:id:: mime_segment_overlap_length - :source-code: base/init-bare.zeek 2403 2403 + :source-code: base/init-bare.zeek 2669 2669 :Type: :zeek:type:`count` :Attributes: :zeek:attr:`&redef` @@ -3753,7 +3777,7 @@ State Variables :zeek:see:`mime_segment_data`. .. zeek:id:: pkt_profile_file - :source-code: base/init-bare.zeek 5217 5217 + :source-code: base/init-bare.zeek 2772 2772 :Type: :zeek:type:`file` :Attributes: :zeek:attr:`&redef` @@ -3763,7 +3787,7 @@ State Variables .. zeek:see:: pkt_profile_modes pkt_profile_freq pkt_profile_mode .. zeek:id:: profiling_file - :source-code: base/init-bare.zeek 5180 5180 + :source-code: base/init-bare.zeek 2735 2735 :Type: :zeek:type:`file` :Attributes: :zeek:attr:`&redef` @@ -3786,7 +3810,7 @@ State Variables .. zeek:see:: profiling_interval expensive_profiling_multiple .. zeek:id:: restrict_filters - :source-code: base/init-bare.zeek 1051 1051 + :source-code: base/init-bare.zeek 1317 1317 :Type: :zeek:type:`table` [:zeek:type:`string`] of :zeek:type:`string` :Attributes: :zeek:attr:`&redef` @@ -3799,7 +3823,7 @@ State Variables PacketFilter::unrestricted_filter capture_filters .. zeek:id:: secondary_filters - :source-code: base/init-bare.zeek 2213 2213 + :source-code: base/init-bare.zeek 2479 2479 :Type: :zeek:type:`table` [:zeek:type:`string`] of :zeek:type:`event` (filter: :zeek:type:`string`, pkt: :zeek:type:`pkt_hdr`) :Attributes: :zeek:attr:`&redef` @@ -3810,7 +3834,7 @@ State Variables raised for all matching packets. .. zeek:id:: signature_files - :source-code: base/init-bare.zeek 2208 2208 + :source-code: base/init-bare.zeek 2474 2474 :Type: :zeek:type:`string` :Attributes: :zeek:attr:`&add_func` = :zeek:see:`add_signature_file` :zeek:attr:`&redef` @@ -3822,7 +3846,7 @@ State Variables since that can search paths relative to the current script. .. zeek:id:: skip_authentication - :source-code: base/init-bare.zeek 2361 2361 + :source-code: base/init-bare.zeek 2627 2627 :Type: :zeek:type:`set` [:zeek:type:`string`] :Attributes: :zeek:attr:`&redef` @@ -3859,7 +3883,7 @@ Types :param aid: The analyzer ID. .. zeek:type:: AnalyzerConfirmationInfo - :source-code: base/init-bare.zeek 2468 2482 + :source-code: base/init-bare.zeek 909 923 :Type: :zeek:type:`record` @@ -3882,7 +3906,7 @@ Types .. zeek:see:: analyzer_confirmation_info .. zeek:type:: AnalyzerViolationInfo - :source-code: base/init-bare.zeek 2487 2507 + :source-code: base/init-bare.zeek 928 948 :Type: :zeek:type:`record` @@ -3911,7 +3935,7 @@ Types .. zeek:see:: analyzer_violation_info .. zeek:type:: Backtrace - :source-code: base/init-bare.zeek 989 989 + :source-code: base/init-bare.zeek 1255 1255 :Type: :zeek:type:`vector` of :zeek:type:`BacktraceElement` @@ -3920,7 +3944,7 @@ Types .. zeek:see:: backtrace print_backtrace .. zeek:type:: BacktraceElement - :source-code: base/init-bare.zeek 975 984 + :source-code: base/init-bare.zeek 1241 1250 :Type: :zeek:type:`record` @@ -3941,7 +3965,7 @@ Types .. zeek:see:: backtrace print_backtrace .. zeek:type:: BrokerStats - :source-code: base/init-bare.zeek 857 875 + :source-code: base/init-bare.zeek 1122 1140 :Type: :zeek:type:`record` @@ -4015,7 +4039,7 @@ Types A pool used for distributing data/work among a set of cluster nodes. .. zeek:type:: ConnStats - :source-code: base/init-bare.zeek 730 752 + :source-code: base/init-bare.zeek 995 1017 :Type: :zeek:type:`record` @@ -4065,7 +4089,7 @@ Types .. zeek:type:: DHCP::Addrs - :source-code: base/init-bare.zeek 3903 3903 + :source-code: base/init-bare.zeek 4604 4604 :Type: :zeek:type:`vector` of :zeek:type:`addr` @@ -4075,7 +4099,7 @@ Types .. zeek:see:: dhcp_message .. zeek:type:: DHCP::ClientFQDN - :source-code: base/init-bare.zeek 3934 3944 + :source-code: base/init-bare.zeek 4635 4645 :Type: :zeek:type:`record` @@ -4095,7 +4119,7 @@ Types DHCP Client FQDN Option information (Option 81) .. zeek:type:: DHCP::ClientID - :source-code: base/init-bare.zeek 3928 3931 + :source-code: base/init-bare.zeek 4629 4632 :Type: :zeek:type:`record` @@ -4108,7 +4132,7 @@ Types .. zeek:see:: dhcp_message .. zeek:type:: DHCP::Msg - :source-code: base/init-bare.zeek 3908 3923 + :source-code: base/init-bare.zeek 4609 4624 :Type: :zeek:type:`record` @@ -4153,7 +4177,7 @@ Types .. zeek:see:: dhcp_message .. zeek:type:: DHCP::Options - :source-code: base/init-bare.zeek 3956 4054 + :source-code: base/init-bare.zeek 4657 4755 :Type: :zeek:type:`record` @@ -4257,7 +4281,7 @@ Types .. zeek:type:: DHCP::SubOpt - :source-code: base/init-bare.zeek 3949 3952 + :source-code: base/init-bare.zeek 4650 4653 :Type: :zeek:type:`record` @@ -4270,13 +4294,13 @@ Types .. zeek:see:: dhcp_message .. zeek:type:: DHCP::SubOpts - :source-code: base/init-bare.zeek 3954 3954 + :source-code: base/init-bare.zeek 4655 4655 :Type: :zeek:type:`vector` of :zeek:type:`DHCP::SubOpt` .. zeek:type:: DNSStats - :source-code: base/init-bare.zeek 826 835 + :source-code: base/init-bare.zeek 1091 1100 :Type: :zeek:type:`record` @@ -4311,7 +4335,7 @@ Types .. zeek:see:: get_dns_stats .. zeek:type:: EncapsulatingConnVector - :source-code: base/init-bare.zeek 511 511 + :source-code: base/init-bare.zeek 752 752 :Type: :zeek:type:`vector` of :zeek:type:`Tunnel::EncapsulatingConn` @@ -4323,7 +4347,7 @@ Types directly and then remove this alias. .. zeek:type:: EventNameCounter - :source-code: base/init-bare.zeek 891 896 + :source-code: base/init-bare.zeek 1156 1161 :Type: :zeek:type:`record` @@ -4339,13 +4363,13 @@ Types .. zeek:see:: get_event_handler_stats .. zeek:type:: EventNameStats - :source-code: base/init-bare.zeek 897 897 + :source-code: base/init-bare.zeek 1163 1163 :Type: :zeek:type:`vector` of :zeek:type:`EventNameCounter` .. zeek:type:: EventStats - :source-code: base/init-bare.zeek 775 778 + :source-code: base/init-bare.zeek 1040 1043 :Type: :zeek:type:`record` @@ -4357,7 +4381,7 @@ Types .. zeek:type:: FileAnalysisStats - :source-code: base/init-bare.zeek 815 819 + :source-code: base/init-bare.zeek 1080 1084 :Type: :zeek:type:`record` @@ -4375,7 +4399,7 @@ Types .. zeek:see:: get_file_analysis_stats .. zeek:type:: GapStats - :source-code: base/init-bare.zeek 840 845 + :source-code: base/init-bare.zeek 1105 1110 :Type: :zeek:type:`record` @@ -4396,7 +4420,7 @@ Types .. zeek:see:: get_gap_stats .. zeek:type:: IPAddrAnonymization - :source-code: base/init-bare.zeek 1058 1065 + :source-code: base/init-bare.zeek 1324 1331 :Type: :zeek:type:`enum` @@ -4413,7 +4437,7 @@ Types .. zeek:see:: anonymize_addr .. zeek:type:: IPAddrAnonymizationClass - :source-code: base/init-bare.zeek 1067 1072 + :source-code: base/init-bare.zeek 1333 1338 :Type: :zeek:type:`enum` @@ -4426,7 +4450,7 @@ Types .. zeek:see:: anonymize_addr .. zeek:type:: JSON::TimestampFormat - :source-code: base/init-bare.zeek 5353 5367 + :source-code: base/init-bare.zeek 5443 5457 :Type: :zeek:type:`enum` @@ -4450,7 +4474,7 @@ Types .. zeek:type:: KRB::AP_Options - :source-code: base/init-bare.zeek 5021 5026 + :source-code: base/init-bare.zeek 5295 5300 :Type: :zeek:type:`record` @@ -4463,7 +4487,7 @@ Types AP Options. See :rfc:`4120` .. zeek:type:: KRB::Error_Msg - :source-code: base/init-bare.zeek 5071 5094 + :source-code: base/init-bare.zeek 5345 5368 :Type: :zeek:type:`record` @@ -4503,7 +4527,7 @@ Types The data from the ERROR_MSG message. See :rfc:`4120`. .. zeek:type:: KRB::Host_Address - :source-code: base/init-bare.zeek 5040 5047 + :source-code: base/init-bare.zeek 5314 5321 :Type: :zeek:type:`record` @@ -4519,13 +4543,13 @@ Types A Kerberos host address See :rfc:`4120`. .. zeek:type:: KRB::Host_Address_Vector - :source-code: base/init-bare.zeek 5049 5049 + :source-code: base/init-bare.zeek 5323 5323 :Type: :zeek:type:`vector` of :zeek:type:`KRB::Host_Address` .. zeek:type:: KRB::KDC_Options - :source-code: base/init-bare.zeek 4987 5018 + :source-code: base/init-bare.zeek 5261 5292 :Type: :zeek:type:`record` @@ -4575,7 +4599,7 @@ Types KDC Options. See :rfc:`4120` .. zeek:type:: KRB::KDC_Request - :source-code: base/init-bare.zeek 5115 5146 + :source-code: base/init-bare.zeek 5389 5420 :Type: :zeek:type:`record` @@ -4624,7 +4648,7 @@ Types The data from the AS_REQ and TGS_REQ messages. See :rfc:`4120`. .. zeek:type:: KRB::KDC_Response - :source-code: base/init-bare.zeek 5149 5163 + :source-code: base/init-bare.zeek 5423 5437 :Type: :zeek:type:`record` @@ -4649,7 +4673,7 @@ Types The data from the AS_REQ and TGS_REQ messages. See :rfc:`4120`. .. zeek:type:: KRB::SAFE_Msg - :source-code: base/init-bare.zeek 5052 5068 + :source-code: base/init-bare.zeek 5326 5342 :Type: :zeek:type:`record` @@ -4678,7 +4702,7 @@ Types The data from the SAFE message. See :rfc:`4120`. .. zeek:type:: KRB::Ticket - :source-code: base/init-bare.zeek 5097 5110 + :source-code: base/init-bare.zeek 5371 5384 :Type: :zeek:type:`record` @@ -4703,13 +4727,13 @@ Types A Kerberos ticket. See :rfc:`4120`. .. zeek:type:: KRB::Ticket_Vector - :source-code: base/init-bare.zeek 5112 5112 + :source-code: base/init-bare.zeek 5386 5386 :Type: :zeek:type:`vector` of :zeek:type:`KRB::Ticket` .. zeek:type:: KRB::Type_Value - :source-code: base/init-bare.zeek 5030 5035 + :source-code: base/init-bare.zeek 5304 5309 :Type: :zeek:type:`record` @@ -4723,13 +4747,13 @@ Types that have a type and a string value. .. zeek:type:: KRB::Type_Value_Vector - :source-code: base/init-bare.zeek 5037 5037 + :source-code: base/init-bare.zeek 5311 5311 :Type: :zeek:type:`vector` of :zeek:type:`KRB::Type_Value` .. zeek:type:: MOUNT3::dirmntargs_t - :source-code: base/init-bare.zeek 2898 2900 + :source-code: base/init-bare.zeek 3601 3603 :Type: :zeek:type:`record` @@ -4741,7 +4765,7 @@ Types .. zeek:see:: mount_proc_mnt .. zeek:type:: MOUNT3::info_t - :source-code: base/init-bare.zeek 2866 2893 + :source-code: base/init-bare.zeek 3569 3596 :Type: :zeek:type:`record` @@ -4792,7 +4816,7 @@ Types contain uninitialized fields, so don't use it. Also note that time .. zeek:type:: MOUNT3::mnt_reply_t - :source-code: base/init-bare.zeek 2906 2909 + :source-code: base/init-bare.zeek 3609 3612 :Type: :zeek:type:`record` @@ -4808,7 +4832,7 @@ Types .. zeek:see:: mount_proc_mnt .. zeek:type:: MQTT::ConnectAckMsg - :source-code: base/init-bare.zeek 5716 5725 + :source-code: base/init-bare.zeek 5778 5787 :Type: :zeek:type:`record` @@ -4823,7 +4847,7 @@ Types .. zeek:type:: MQTT::ConnectMsg - :source-code: base/init-bare.zeek 5684 5714 + :source-code: base/init-bare.zeek 5746 5776 :Type: :zeek:type:`record` @@ -4865,7 +4889,7 @@ Types .. zeek:type:: MQTT::PublishMsg - :source-code: base/init-bare.zeek 5727 5749 + :source-code: base/init-bare.zeek 5789 5811 :Type: :zeek:type:`record` @@ -4893,7 +4917,7 @@ Types .. zeek:type:: MatcherStats - :source-code: base/init-bare.zeek 793 801 + :source-code: base/init-bare.zeek 1058 1066 :Type: :zeek:type:`record` @@ -4923,7 +4947,7 @@ Types .. zeek:see:: get_matcher_stats .. zeek:type:: ModbusCoils - :source-code: base/init-bare.zeek 4580 4580 + :source-code: base/init-bare.zeek 3158 3158 :Type: :zeek:type:`vector` of :zeek:type:`bool` @@ -4931,7 +4955,7 @@ Types for a range of modbus coils. .. zeek:type:: ModbusFileRecordRequest - :source-code: base/init-bare.zeek 4600 4605 + :source-code: base/init-bare.zeek 3178 3183 :Type: :zeek:type:`record` @@ -4945,13 +4969,13 @@ Types .. zeek:type:: ModbusFileRecordRequests - :source-code: base/init-bare.zeek 4607 4607 + :source-code: base/init-bare.zeek 3185 3185 :Type: :zeek:type:`vector` of :zeek:type:`ModbusFileRecordRequest` .. zeek:type:: ModbusFileRecordResponse - :source-code: base/init-bare.zeek 4609 4613 + :source-code: base/init-bare.zeek 3187 3191 :Type: :zeek:type:`record` @@ -4963,13 +4987,13 @@ Types .. zeek:type:: ModbusFileRecordResponses - :source-code: base/init-bare.zeek 4615 4615 + :source-code: base/init-bare.zeek 3193 3193 :Type: :zeek:type:`vector` of :zeek:type:`ModbusFileRecordResponse` .. zeek:type:: ModbusFileReference - :source-code: base/init-bare.zeek 4617 4623 + :source-code: base/init-bare.zeek 3195 3201 :Type: :zeek:type:`record` @@ -4985,13 +5009,13 @@ Types .. zeek:type:: ModbusFileReferences - :source-code: base/init-bare.zeek 4625 4625 + :source-code: base/init-bare.zeek 3203 3203 :Type: :zeek:type:`vector` of :zeek:type:`ModbusFileReference` .. zeek:type:: ModbusHeaders - :source-code: base/init-bare.zeek 4586 4598 + :source-code: base/init-bare.zeek 3164 3176 :Type: :zeek:type:`record` @@ -5013,7 +5037,7 @@ Types .. zeek:type:: ModbusRegisters - :source-code: base/init-bare.zeek 4584 4584 + :source-code: base/init-bare.zeek 3162 3162 :Type: :zeek:type:`vector` of :zeek:type:`count` @@ -5021,7 +5045,7 @@ Types register values. .. zeek:type:: NFS3::delobj_reply_t - :source-code: base/init-bare.zeek 2771 2774 + :source-code: base/init-bare.zeek 3475 3478 :Type: :zeek:type:`record` @@ -5036,7 +5060,7 @@ Types .. zeek:see:: nfs_proc_remove nfs_proc_rmdir .. zeek:type:: NFS3::direntry_t - :source-code: base/init-bare.zeek 2802 2808 + :source-code: base/init-bare.zeek 3506 3512 :Type: :zeek:type:`record` @@ -5061,7 +5085,7 @@ Types .. zeek:see:: NFS3::direntry_vec_t NFS3::readdir_reply_t .. zeek:type:: NFS3::direntry_vec_t - :source-code: base/init-bare.zeek 2813 2813 + :source-code: base/init-bare.zeek 3517 3517 :Type: :zeek:type:`vector` of :zeek:type:`NFS3::direntry_t` @@ -5070,7 +5094,7 @@ Types .. zeek:see:: NFS3::readdir_reply_t .. zeek:type:: NFS3::diropargs_t - :source-code: base/init-bare.zeek 2628 2631 + :source-code: base/init-bare.zeek 3332 3335 :Type: :zeek:type:`record` @@ -5085,7 +5109,7 @@ Types .. zeek:see:: nfs_proc_readdir .. zeek:type:: NFS3::fattr_t - :source-code: base/init-bare.zeek 2600 2615 + :source-code: base/init-bare.zeek 3304 3319 :Type: :zeek:type:`record` @@ -5136,7 +5160,7 @@ Types .. zeek:see:: nfs_proc_getattr .. zeek:type:: NFS3::fsstat_t - :source-code: base/init-bare.zeek 2827 2836 + :source-code: base/init-bare.zeek 3531 3540 :Type: :zeek:type:`record` @@ -5167,7 +5191,7 @@ Types NFS *fsstat*. .. zeek:type:: NFS3::info_t - :source-code: base/init-bare.zeek 2556 2583 + :source-code: base/init-bare.zeek 3260 3287 :Type: :zeek:type:`record` @@ -5227,7 +5251,7 @@ Types nfs_proc_rmdir nfs_proc_write nfs_reply_status .. zeek:type:: NFS3::link_reply_t - :source-code: base/init-bare.zeek 2728 2732 + :source-code: base/init-bare.zeek 3432 3436 :Type: :zeek:type:`record` @@ -5245,7 +5269,7 @@ Types .. zeek:see:: nfs_proc_link .. zeek:type:: NFS3::linkargs_t - :source-code: base/init-bare.zeek 2654 2657 + :source-code: base/init-bare.zeek 3358 3361 :Type: :zeek:type:`record` @@ -5260,7 +5284,7 @@ Types .. zeek:see:: nfs_proc_link .. zeek:type:: NFS3::lookup_reply_t - :source-code: base/init-bare.zeek 2672 2676 + :source-code: base/init-bare.zeek 3376 3380 :Type: :zeek:type:`record` @@ -5280,7 +5304,7 @@ Types .. zeek:see:: nfs_proc_lookup .. zeek:type:: NFS3::newobj_reply_t - :source-code: base/init-bare.zeek 2761 2766 + :source-code: base/init-bare.zeek 3465 3470 :Type: :zeek:type:`record` @@ -5304,7 +5328,7 @@ Types .. zeek:see:: nfs_proc_create nfs_proc_mkdir .. zeek:type:: NFS3::read_reply_t - :source-code: base/init-bare.zeek 2689 2694 + :source-code: base/init-bare.zeek 3393 3398 :Type: :zeek:type:`record` @@ -5324,7 +5348,7 @@ Types lookup succeeds, *attr* may be set and all other fields are set. .. zeek:type:: NFS3::readargs_t - :source-code: base/init-bare.zeek 2681 2685 + :source-code: base/init-bare.zeek 3385 3389 :Type: :zeek:type:`record` @@ -5342,7 +5366,7 @@ Types .. zeek:see:: nfs_proc_read .. zeek:type:: NFS3::readdir_reply_t - :source-code: base/init-bare.zeek 2818 2824 + :source-code: base/init-bare.zeek 3522 3528 :Type: :zeek:type:`record` @@ -5366,7 +5390,7 @@ Types all others must be set. .. zeek:type:: NFS3::readdirargs_t - :source-code: base/init-bare.zeek 2789 2796 + :source-code: base/init-bare.zeek 3493 3500 :Type: :zeek:type:`record` @@ -5393,7 +5417,7 @@ Types .. zeek:see:: nfs_proc_readdir .. zeek:type:: NFS3::readlink_reply_t - :source-code: base/init-bare.zeek 2700 2703 + :source-code: base/init-bare.zeek 3404 3407 :Type: :zeek:type:`record` @@ -5409,7 +5433,7 @@ Types .. zeek:see:: nfs_proc_readlink .. zeek:type:: NFS3::renameobj_reply_t - :source-code: base/init-bare.zeek 2779 2784 + :source-code: base/init-bare.zeek 3483 3488 :Type: :zeek:type:`record` @@ -5426,7 +5450,7 @@ Types .. zeek:see:: nfs_proc_rename .. zeek:type:: NFS3::renameopargs_t - :source-code: base/init-bare.zeek 2636 2641 + :source-code: base/init-bare.zeek 3340 3345 :Type: :zeek:type:`record` @@ -5443,7 +5467,7 @@ Types .. zeek:see:: nfs_proc_rename .. zeek:type:: NFS3::sattr_reply_t - :source-code: base/init-bare.zeek 2737 2740 + :source-code: base/init-bare.zeek 3441 3444 :Type: :zeek:type:`record` @@ -5458,7 +5482,7 @@ Types .. zeek:type:: NFS3::sattr_t - :source-code: base/init-bare.zeek 2588 2595 + :source-code: base/init-bare.zeek 3292 3299 :Type: :zeek:type:`record` @@ -5485,7 +5509,7 @@ Types .. zeek:see:: nfs_proc_sattr .. zeek:type:: NFS3::sattrargs_t - :source-code: base/init-bare.zeek 2662 2665 + :source-code: base/init-bare.zeek 3366 3369 :Type: :zeek:type:`record` @@ -5500,7 +5524,7 @@ Types .. zeek:see:: nfs_proc_sattr .. zeek:type:: NFS3::symlinkargs_t - :source-code: base/init-bare.zeek 2646 2649 + :source-code: base/init-bare.zeek 3350 3353 :Type: :zeek:type:`record` @@ -5515,7 +5539,7 @@ Types .. zeek:see:: nfs_proc_symlink .. zeek:type:: NFS3::symlinkdata_t - :source-code: base/init-bare.zeek 2620 2623 + :source-code: base/init-bare.zeek 3324 3327 :Type: :zeek:type:`record` @@ -5530,7 +5554,7 @@ Types .. zeek:see:: nfs_proc_symlink .. zeek:type:: NFS3::wcc_attr_t - :source-code: base/init-bare.zeek 2719 2723 + :source-code: base/init-bare.zeek 3423 3427 :Type: :zeek:type:`record` @@ -5548,7 +5572,7 @@ Types .. zeek:see:: NFS3::write_reply_t .. zeek:type:: NFS3::write_reply_t - :source-code: base/init-bare.zeek 2747 2753 + :source-code: base/init-bare.zeek 3451 3457 :Type: :zeek:type:`record` @@ -5574,7 +5598,7 @@ Types .. zeek:see:: nfs_proc_write .. zeek:type:: NFS3::writeargs_t - :source-code: base/init-bare.zeek 2708 2714 + :source-code: base/init-bare.zeek 3412 3418 :Type: :zeek:type:`record` @@ -5598,7 +5622,7 @@ Types .. zeek:see:: nfs_proc_write .. zeek:type:: NTLM::AVs - :source-code: base/init-bare.zeek 3081 3105 + :source-code: base/init-bare.zeek 3784 3808 :Type: :zeek:type:`record` @@ -5634,7 +5658,7 @@ Types .. zeek:type:: NTLM::Authenticate - :source-code: base/init-bare.zeek 3123 3138 + :source-code: base/init-bare.zeek 3826 3841 :Type: :zeek:type:`record` @@ -5661,7 +5685,7 @@ Types .. zeek:type:: NTLM::Challenge - :source-code: base/init-bare.zeek 3107 3121 + :source-code: base/init-bare.zeek 3810 3824 :Type: :zeek:type:`record` @@ -5685,7 +5709,7 @@ Types .. zeek:type:: NTLM::Negotiate - :source-code: base/init-bare.zeek 3070 3079 + :source-code: base/init-bare.zeek 3773 3782 :Type: :zeek:type:`record` @@ -5703,7 +5727,7 @@ Types .. zeek:type:: NTLM::NegotiateFlags - :source-code: base/init-bare.zeek 3015 3068 + :source-code: base/init-bare.zeek 3718 3771 :Type: :zeek:type:`record` @@ -5780,7 +5804,7 @@ Types .. zeek:type:: NTLM::Version - :source-code: base/init-bare.zeek 3004 3013 + :source-code: base/init-bare.zeek 3707 3716 :Type: :zeek:type:`record` @@ -5798,7 +5822,7 @@ Types .. zeek:type:: NTP::ControlMessage - :source-code: base/init-bare.zeek 5571 5605 + :source-code: base/init-bare.zeek 5632 5666 :Type: :zeek:type:`record` @@ -5849,7 +5873,7 @@ Types for control operations. .. zeek:type:: NTP::Message - :source-code: base/init-bare.zeek 5652 5679 + :source-code: base/init-bare.zeek 5713 5740 :Type: :zeek:type:`record` @@ -5889,7 +5913,7 @@ Types for commands such as "monlist". .. zeek:type:: NTP::Mode7Message - :source-code: base/init-bare.zeek 5614 5647 + :source-code: base/init-bare.zeek 5675 5708 :Type: :zeek:type:`record` @@ -5940,7 +5964,7 @@ Types project `_, code v. ntp-4.2.8p13, in include/ntp_request.h. .. zeek:type:: NTP::StandardMessage - :source-code: base/init-bare.zeek 5513 5566 + :source-code: base/init-bare.zeek 5574 5627 :Type: :zeek:type:`record` @@ -6015,7 +6039,7 @@ Types for standard synchronization operations. .. zeek:type:: NetStats - :source-code: base/init-bare.zeek 717 728 + :source-code: base/init-bare.zeek 982 993 :Type: :zeek:type:`record` @@ -6043,7 +6067,7 @@ Types .. zeek:see:: get_net_stats .. zeek:type:: PE::DOSHeader - :source-code: base/init-bare.zeek 4396 4432 + :source-code: base/init-bare.zeek 4761 4797 :Type: :zeek:type:`record` @@ -6101,7 +6125,7 @@ Types .. zeek:type:: PE::FileHeader - :source-code: base/init-bare.zeek 4434 4447 + :source-code: base/init-bare.zeek 4799 4812 :Type: :zeek:type:`record` @@ -6125,7 +6149,7 @@ Types .. zeek:type:: PE::OptionalHeader - :source-code: base/init-bare.zeek 4449 4500 + :source-code: base/init-bare.zeek 4814 4865 :Type: :zeek:type:`record` @@ -6205,7 +6229,7 @@ Types .. zeek:type:: PE::SectionHeader - :source-code: base/init-bare.zeek 4504 4529 + :source-code: base/init-bare.zeek 4869 4894 :Type: :zeek:type:`record` @@ -6266,7 +6290,7 @@ Types Properties of an I/O packet source being read by Zeek. .. zeek:type:: Pcap::Interface - :source-code: base/init-bare.zeek 5462 5477 + :source-code: base/init-bare.zeek 5520 5535 :Type: :zeek:type:`record` @@ -6292,13 +6316,13 @@ Types The definition of a "pcap interface". .. zeek:type:: Pcap::Interfaces - :source-code: base/init-bare.zeek 5479 5479 + :source-code: base/init-bare.zeek 5537 5537 :Type: :zeek:type:`set` [:zeek:type:`Pcap::Interface`] .. zeek:type:: Pcap::filter_state - :source-code: base/init-bare.zeek 5482 5487 + :source-code: base/init-bare.zeek 5540 5545 :Type: :zeek:type:`enum` @@ -6311,7 +6335,7 @@ Types The state of the compilation for a pcap filter. .. zeek:type:: PcapFilterID - :source-code: base/init-bare.zeek 1055 1056 + :source-code: base/init-bare.zeek 1321 1322 :Type: :zeek:type:`enum` @@ -6331,7 +6355,7 @@ Types :zeek:see:`Pcap::precompile_pcap_filter` and :zeek:see:`Pcap::precompile_pcap_filter`. .. zeek:type:: ProcStats - :source-code: base/init-bare.zeek 760 773 + :source-code: base/init-bare.zeek 1025 1038 :Type: :zeek:type:`record` @@ -6379,19 +6403,19 @@ Types the child process it spawns for doing communication. .. zeek:type:: RADIUS::AttributeList - :source-code: base/init-bare.zeek 4731 4731 + :source-code: base/init-bare.zeek 5002 5002 :Type: :zeek:type:`vector` of :zeek:type:`string` .. zeek:type:: RADIUS::Attributes - :source-code: base/init-bare.zeek 4732 4732 + :source-code: base/init-bare.zeek 5003 5003 :Type: :zeek:type:`table` [:zeek:type:`count`] of :zeek:type:`RADIUS::AttributeList` .. zeek:type:: RADIUS::Message - :source-code: base/init-bare.zeek 4734 4743 + :source-code: base/init-bare.zeek 5005 5014 :Type: :zeek:type:`record` @@ -6409,7 +6433,7 @@ Types .. zeek:type:: RDP::ClientChannelDef - :source-code: base/init-bare.zeek 4800 4828 + :source-code: base/init-bare.zeek 5072 5100 :Type: :zeek:type:`record` @@ -6456,14 +6480,14 @@ Types Name and flags for a single channel requested by the client. .. zeek:type:: RDP::ClientChannelList - :source-code: base/init-bare.zeek 4855 4855 + :source-code: base/init-bare.zeek 5127 5127 :Type: :zeek:type:`vector` of :zeek:type:`RDP::ClientChannelDef` The list of channels requested by the client. .. zeek:type:: RDP::ClientClusterData - :source-code: base/init-bare.zeek 4833 4852 + :source-code: base/init-bare.zeek 5105 5124 :Type: :zeek:type:`record` @@ -6496,7 +6520,7 @@ Types or to request a connection to a given session identifier. .. zeek:type:: RDP::ClientCoreData - :source-code: base/init-bare.zeek 4760 4781 + :source-code: base/init-bare.zeek 5032 5053 :Type: :zeek:type:`record` @@ -6542,7 +6566,7 @@ Types .. zeek:type:: RDP::ClientSecurityData - :source-code: base/init-bare.zeek 4785 4797 + :source-code: base/init-bare.zeek 5057 5069 :Type: :zeek:type:`record` @@ -6563,7 +6587,7 @@ Types to advertise client cryptographic support. .. zeek:type:: RDP::EarlyCapabilityFlags - :source-code: base/init-bare.zeek 4748 4758 + :source-code: base/init-bare.zeek 5020 5030 :Type: :zeek:type:`record` @@ -6587,7 +6611,7 @@ Types .. zeek:type:: ReassemblerStats - :source-code: base/init-bare.zeek 783 788 + :source-code: base/init-bare.zeek 1048 1053 :Type: :zeek:type:`record` @@ -6608,7 +6632,7 @@ Types .. zeek:see:: get_reassembler_stats .. zeek:type:: ReporterStats - :source-code: base/init-bare.zeek 880 886 + :source-code: base/init-bare.zeek 1145 1151 :Type: :zeek:type:`record` @@ -6624,7 +6648,7 @@ Types .. zeek:see:: get_reporter_stats .. zeek:type:: SMB1::Find_First2_Request_Args - :source-code: base/init-bare.zeek 3516 3530 + :source-code: base/init-bare.zeek 4219 4233 :Type: :zeek:type:`record` @@ -6649,7 +6673,7 @@ Types .. zeek:type:: SMB1::Find_First2_Response_Args - :source-code: base/init-bare.zeek 3532 3542 + :source-code: base/init-bare.zeek 4235 4245 :Type: :zeek:type:`record` @@ -6668,7 +6692,7 @@ Types .. zeek:type:: SMB1::Header - :source-code: base/init-bare.zeek 3213 3222 + :source-code: base/init-bare.zeek 3916 3925 :Type: :zeek:type:`record` @@ -6716,7 +6740,7 @@ Types smb1_write_andx_response .. zeek:type:: SMB1::NegotiateCapabilities - :source-code: base/init-bare.zeek 3231 3273 + :source-code: base/init-bare.zeek 3934 3976 :Type: :zeek:type:`record` @@ -6778,7 +6802,7 @@ Types .. zeek:type:: SMB1::NegotiateRawMode - :source-code: base/init-bare.zeek 3224 3229 + :source-code: base/init-bare.zeek 3927 3932 :Type: :zeek:type:`record` @@ -6790,7 +6814,7 @@ Types .. zeek:type:: SMB1::NegotiateResponse - :source-code: base/init-bare.zeek 3363 3372 + :source-code: base/init-bare.zeek 4066 4075 :Type: :zeek:type:`record` @@ -6807,7 +6831,7 @@ Types .. zeek:type:: SMB1::NegotiateResponseCore - :source-code: base/init-bare.zeek 3292 3295 + :source-code: base/init-bare.zeek 3995 3998 :Type: :zeek:type:`record` @@ -6816,7 +6840,7 @@ Types .. zeek:type:: SMB1::NegotiateResponseLANMAN - :source-code: base/init-bare.zeek 3297 3323 + :source-code: base/init-bare.zeek 4000 4026 :Type: :zeek:type:`record` @@ -6856,7 +6880,7 @@ Types .. zeek:type:: SMB1::NegotiateResponseNTLM - :source-code: base/init-bare.zeek 3325 3361 + :source-code: base/init-bare.zeek 4028 4064 :Type: :zeek:type:`record` @@ -6909,7 +6933,7 @@ Types .. zeek:type:: SMB1::NegotiateResponseSecurity - :source-code: base/init-bare.zeek 3275 3290 + :source-code: base/init-bare.zeek 3978 3993 :Type: :zeek:type:`record` @@ -6933,7 +6957,7 @@ Types .. zeek:type:: SMB1::SessionSetupAndXCapabilities - :source-code: base/init-bare.zeek 3374 3388 + :source-code: base/init-bare.zeek 4077 4091 :Type: :zeek:type:`record` @@ -6958,7 +6982,7 @@ Types .. zeek:type:: SMB1::SessionSetupAndXRequest - :source-code: base/init-bare.zeek 3390 3432 + :source-code: base/init-bare.zeek 4093 4135 :Type: :zeek:type:`record` @@ -7017,7 +7041,7 @@ Types .. zeek:type:: SMB1::SessionSetupAndXResponse - :source-code: base/init-bare.zeek 3434 3447 + :source-code: base/init-bare.zeek 4137 4150 :Type: :zeek:type:`record` @@ -7041,7 +7065,7 @@ Types .. zeek:type:: SMB1::Trans2_Args - :source-code: base/init-bare.zeek 3449 3474 + :source-code: base/init-bare.zeek 4152 4177 :Type: :zeek:type:`record` @@ -7083,7 +7107,7 @@ Types .. zeek:type:: SMB1::Trans2_Sec_Args - :source-code: base/init-bare.zeek 3495 3514 + :source-code: base/init-bare.zeek 4198 4217 :Type: :zeek:type:`record` @@ -7116,7 +7140,7 @@ Types .. zeek:type:: SMB1::Trans_Sec_Args - :source-code: base/init-bare.zeek 3476 3493 + :source-code: base/init-bare.zeek 4179 4196 :Type: :zeek:type:`record` @@ -7146,7 +7170,7 @@ Types .. zeek:type:: SMB2::CloseResponse - :source-code: base/init-bare.zeek 3657 3666 + :source-code: base/init-bare.zeek 4360 4369 :Type: :zeek:type:`record` @@ -7170,7 +7194,7 @@ Types .. zeek:see:: smb2_close_response .. zeek:type:: SMB2::CompressionCapabilities - :source-code: base/init-bare.zeek 3698 3703 + :source-code: base/init-bare.zeek 4401 4406 :Type: :zeek:type:`record` @@ -7186,7 +7210,7 @@ Types .. zeek:type:: SMB2::CreateRequest - :source-code: base/init-bare.zeek 3805 3812 + :source-code: base/init-bare.zeek 4508 4515 :Type: :zeek:type:`record` @@ -7206,7 +7230,7 @@ Types .. zeek:see:: smb2_create_request .. zeek:type:: SMB2::CreateResponse - :source-code: base/init-bare.zeek 3820 3831 + :source-code: base/init-bare.zeek 4523 4534 :Type: :zeek:type:`record` @@ -7233,7 +7257,7 @@ Types .. zeek:see:: smb2_create_response .. zeek:type:: SMB2::EncryptionCapabilities - :source-code: base/init-bare.zeek 3687 3692 + :source-code: base/init-bare.zeek 4390 4395 :Type: :zeek:type:`record` @@ -7249,7 +7273,7 @@ Types .. zeek:type:: SMB2::FileAttrs - :source-code: base/init-bare.zeek 3606 3649 + :source-code: base/init-bare.zeek 4309 4352 :Type: :zeek:type:`record` @@ -7317,7 +7341,7 @@ Types .. zeek:see:: smb2_create_response .. zeek:type:: SMB2::FileEA - :source-code: base/init-bare.zeek 3856 3861 + :source-code: base/init-bare.zeek 4559 4564 :Type: :zeek:type:`record` @@ -7333,7 +7357,7 @@ Types .. zeek:type:: SMB2::FileEAs - :source-code: base/init-bare.zeek 3867 3867 + :source-code: base/init-bare.zeek 4570 4570 :Type: :zeek:type:`vector` of :zeek:type:`SMB2::FileEA` @@ -7343,7 +7367,7 @@ Types .. zeek:type:: SMB2::Fscontrol - :source-code: base/init-bare.zeek 3837 3850 + :source-code: base/init-bare.zeek 4540 4553 :Type: :zeek:type:`record` @@ -7371,7 +7395,7 @@ Types .. zeek:type:: SMB2::GUID - :source-code: base/init-bare.zeek 3594 3599 + :source-code: base/init-bare.zeek 4297 4302 :Type: :zeek:type:`record` @@ -7389,7 +7413,7 @@ Types smb2_file_rename smb2_file_delete smb2_write_request .. zeek:type:: SMB2::Header - :source-code: base/init-bare.zeek 3561 3586 + :source-code: base/init-bare.zeek 4264 4289 :Type: :zeek:type:`record` @@ -7440,7 +7464,7 @@ Types smb2_write_request .. zeek:type:: SMB2::NegotiateContextValue - :source-code: base/init-bare.zeek 3709 3722 + :source-code: base/init-bare.zeek 4412 4425 :Type: :zeek:type:`record` @@ -7468,13 +7492,13 @@ Types .. zeek:type:: SMB2::NegotiateContextValues - :source-code: base/init-bare.zeek 3724 3724 + :source-code: base/init-bare.zeek 4427 4427 :Type: :zeek:type:`vector` of :zeek:type:`SMB2::NegotiateContextValue` .. zeek:type:: SMB2::NegotiateResponse - :source-code: base/init-bare.zeek 3732 3749 + :source-code: base/init-bare.zeek 4435 4452 :Type: :zeek:type:`record` @@ -7508,7 +7532,7 @@ Types .. zeek:see:: smb2_negotiate_response .. zeek:type:: SMB2::PreAuthIntegrityCapabilities - :source-code: base/init-bare.zeek 3672 3681 + :source-code: base/init-bare.zeek 4375 4384 :Type: :zeek:type:`record` @@ -7530,7 +7554,7 @@ Types .. zeek:type:: SMB2::SessionSetupFlags - :source-code: base/init-bare.zeek 3768 3775 + :source-code: base/init-bare.zeek 4471 4478 :Type: :zeek:type:`record` @@ -7551,7 +7575,7 @@ Types .. zeek:see:: smb2_session_setup_response .. zeek:type:: SMB2::SessionSetupRequest - :source-code: base/init-bare.zeek 3757 3760 + :source-code: base/init-bare.zeek 4460 4463 :Type: :zeek:type:`record` @@ -7566,7 +7590,7 @@ Types .. zeek:see:: smb2_session_setup_request .. zeek:type:: SMB2::SessionSetupResponse - :source-code: base/init-bare.zeek 3784 3787 + :source-code: base/init-bare.zeek 4487 4490 :Type: :zeek:type:`record` @@ -7582,7 +7606,7 @@ Types .. zeek:see:: smb2_session_setup_response .. zeek:type:: SMB2::Transform_header - :source-code: base/init-bare.zeek 3880 3891 + :source-code: base/init-bare.zeek 4583 4594 :Type: :zeek:type:`record` @@ -7614,7 +7638,7 @@ Types smb2_write_request .. zeek:type:: SMB2::TreeConnectResponse - :source-code: base/init-bare.zeek 3795 3798 + :source-code: base/init-bare.zeek 4498 4501 :Type: :zeek:type:`record` @@ -7629,7 +7653,7 @@ Types .. zeek:see:: smb2_tree_connect_response .. zeek:type:: SMB::MACTimes - :source-code: base/init-bare.zeek 3149 3166 + :source-code: base/init-bare.zeek 3852 3869 :Type: :zeek:type:`record` @@ -7664,7 +7688,7 @@ Types .. zeek:see:: smb1_nt_create_andx_response smb2_create_response .. zeek:type:: SNMP::Binding - :source-code: base/init-bare.zeek 4944 4947 + :source-code: base/init-bare.zeek 5217 5220 :Type: :zeek:type:`record` @@ -7676,7 +7700,7 @@ Types :rfc:`3416`, which maps an Object Identifier to a value. .. zeek:type:: SNMP::Bindings - :source-code: base/init-bare.zeek 4951 4951 + :source-code: base/init-bare.zeek 5224 5224 :Type: :zeek:type:`vector` of :zeek:type:`SNMP::Binding` @@ -7684,7 +7708,7 @@ Types A sequences of :zeek:see:`SNMP::Binding`, which maps an OIDs to values. .. zeek:type:: SNMP::BulkPDU - :source-code: base/init-bare.zeek 4972 4977 + :source-code: base/init-bare.zeek 5245 5250 :Type: :zeek:type:`record` @@ -7699,7 +7723,7 @@ Types A ``BulkPDU`` data structure from :rfc:`3416`. .. zeek:type:: SNMP::Header - :source-code: base/init-bare.zeek 4899 4904 + :source-code: base/init-bare.zeek 5172 5177 :Type: :zeek:type:`record` @@ -7719,7 +7743,7 @@ Types determines what header field is initialized. .. zeek:type:: SNMP::HeaderV1 - :source-code: base/init-bare.zeek 4864 4866 + :source-code: base/init-bare.zeek 5137 5139 :Type: :zeek:type:`record` @@ -7729,7 +7753,7 @@ Types including the PDU data. See :rfc:`1157`. .. zeek:type:: SNMP::HeaderV2 - :source-code: base/init-bare.zeek 4870 4872 + :source-code: base/init-bare.zeek 5143 5145 :Type: :zeek:type:`record` @@ -7739,7 +7763,7 @@ Types including the PDU data. See :rfc:`1901`. .. zeek:type:: SNMP::HeaderV3 - :source-code: base/init-bare.zeek 4884 4894 + :source-code: base/init-bare.zeek 5157 5167 :Type: :zeek:type:`record` @@ -7765,7 +7789,7 @@ Types including the PDU data. See :rfc:`3412`. .. zeek:type:: SNMP::ObjectValue - :source-code: base/init-bare.zeek 4915 4922 + :source-code: base/init-bare.zeek 5188 5195 :Type: :zeek:type:`record` @@ -7792,7 +7816,7 @@ Types values will only have their corresponding tag value set. .. zeek:type:: SNMP::PDU - :source-code: base/init-bare.zeek 4954 4959 + :source-code: base/init-bare.zeek 5227 5232 :Type: :zeek:type:`record` @@ -7807,7 +7831,7 @@ Types A ``PDU`` data structure from either :rfc:`1157` or :rfc:`3416`. .. zeek:type:: SNMP::ScopedPDU_Context - :source-code: base/init-bare.zeek 4877 4880 + :source-code: base/init-bare.zeek 5150 5153 :Type: :zeek:type:`record` @@ -7820,7 +7844,7 @@ Types See :rfc:`3412`. .. zeek:type:: SNMP::TrapPDU - :source-code: base/init-bare.zeek 4962 4969 + :source-code: base/init-bare.zeek 5235 5242 :Type: :zeek:type:`record` @@ -7839,7 +7863,7 @@ Types A ``Trap-PDU`` data structure from :rfc:`1157`. .. zeek:type:: SOCKS::Address - :source-code: base/init-bare.zeek 4722 4725 + :source-code: base/init-bare.zeek 4993 4996 :Type: :zeek:type:`record` @@ -7852,7 +7876,7 @@ Types name or an address to represent a desired or established connection. .. zeek:type:: SSH::Algorithm_Prefs - :source-code: base/init-bare.zeek 2971 2976 + :source-code: base/init-bare.zeek 3674 3679 :Type: :zeek:type:`record` @@ -7866,7 +7890,7 @@ Types in each direction. .. zeek:type:: SSH::Capabilities - :source-code: base/init-bare.zeek 2983 2998 + :source-code: base/init-bare.zeek 3686 3701 :Type: :zeek:type:`record` @@ -7898,7 +7922,7 @@ Types :rfc:`4253#section-7.1` for details. .. zeek:type:: SSL::PSKIdentity - :source-code: base/init-bare.zeek 4635 4638 + :source-code: base/init-bare.zeek 4905 4908 :Type: :zeek:type:`record` @@ -7909,7 +7933,7 @@ Types .. zeek:type:: SSL::SignatureAndHashAlgorithm - :source-code: base/init-bare.zeek 4630 4633 + :source-code: base/init-bare.zeek 4900 4903 :Type: :zeek:type:`record` @@ -7921,7 +7945,7 @@ Types .. zeek:type:: SYN_packet - :source-code: base/init-bare.zeek 701 712 + :source-code: base/init-bare.zeek 966 977 :Type: :zeek:type:`record` @@ -7960,7 +7984,7 @@ Types .. zeek:see:: connection_SYN_packet .. zeek:type:: TCP::Option - :source-code: base/init-bare.zeek 395 422 + :source-code: base/init-bare.zeek 603 630 :Type: :zeek:type:`record` @@ -8004,14 +8028,14 @@ Types A TCP Option field parsed from a TCP header. .. zeek:type:: TCP::OptionList - :source-code: base/init-bare.zeek 425 425 + :source-code: base/init-bare.zeek 633 633 :Type: :zeek:type:`vector` of :zeek:type:`TCP::Option` The full list of TCP Option fields parsed from a TCP header. .. zeek:type:: Telemetry::HistogramMetric - :source-code: base/init-bare.zeek 5930 5954 + :source-code: base/init-bare.zeek 5997 6021 :Type: :zeek:type:`record` @@ -8042,13 +8066,13 @@ Types Histograms returned by the :zeek:see:`Telemetry::collect_histogram_metrics` function. .. zeek:type:: Telemetry::HistogramMetricVector - :source-code: base/init-bare.zeek 5972 5972 + :source-code: base/init-bare.zeek 6039 6039 :Type: :zeek:type:`vector` of :zeek:type:`Telemetry::HistogramMetric` .. zeek:type:: Telemetry::Metric - :source-code: base/init-bare.zeek 5907 5927 + :source-code: base/init-bare.zeek 5974 5994 :Type: :zeek:type:`record` @@ -8075,7 +8099,7 @@ Types Metrics returned by the :zeek:see:`Telemetry::collect_metrics` function. .. zeek:type:: Telemetry::MetricOpts - :source-code: base/init-bare.zeek 5856 5904 + :source-code: base/init-bare.zeek 5923 5971 :Type: :zeek:type:`record` @@ -8130,13 +8154,13 @@ Types Type that captures options used to create metrics. .. zeek:type:: Telemetry::MetricVector - :source-code: base/init-bare.zeek 5971 5971 + :source-code: base/init-bare.zeek 6038 6038 :Type: :zeek:type:`vector` of :zeek:type:`Telemetry::Metric` .. zeek:type:: ThreadStats - :source-code: base/init-bare.zeek 850 852 + :source-code: base/init-bare.zeek 1115 1117 :Type: :zeek:type:`record` @@ -8147,7 +8171,7 @@ Types .. zeek:see:: get_thread_stats .. zeek:type:: TimerStats - :source-code: base/init-bare.zeek 806 810 + :source-code: base/init-bare.zeek 1071 1075 :Type: :zeek:type:`record` @@ -8165,7 +8189,7 @@ Types .. zeek:see:: get_timer_stats .. zeek:type:: Tunnel::EncapsulatingConn - :source-code: base/init-bare.zeek 431 443 + :source-code: base/init-bare.zeek 640 652 :Type: :zeek:type:`record` @@ -8187,7 +8211,7 @@ Types Records the identity of an encapsulating parent of a tunneled connection. .. zeek:type:: WebSocket::AnalyzerConfig - :source-code: base/init-bare.zeek 484 500 + :source-code: base/init-bare.zeek 725 741 :Type: :zeek:type:`record` @@ -8213,7 +8237,7 @@ Types parameters collected from HTTP headers. .. zeek:type:: X509::BasicConstraints - :source-code: base/init-bare.zeek 4694 4697 + :source-code: base/init-bare.zeek 4964 4967 :Type: :zeek:type:`record` @@ -8226,7 +8250,7 @@ Types .. zeek:type:: X509::Certificate - :source-code: base/init-bare.zeek 4669 4684 + :source-code: base/init-bare.zeek 4939 4954 :Type: :zeek:type:`record` @@ -8274,7 +8298,7 @@ Types .. zeek:type:: X509::Extension - :source-code: base/init-bare.zeek 4686 4692 + :source-code: base/init-bare.zeek 4956 4962 :Type: :zeek:type:`record` @@ -8295,7 +8319,7 @@ Types .. zeek:type:: X509::Result - :source-code: base/init-bare.zeek 4708 4715 + :source-code: base/init-bare.zeek 4978 4985 :Type: :zeek:type:`record` @@ -8311,7 +8335,7 @@ Types Result of an X509 certificate chain verification .. zeek:type:: X509::SubjectAlternativeName - :source-code: base/init-bare.zeek 4699 4705 + :source-code: base/init-bare.zeek 4969 4975 :Type: :zeek:type:`record` @@ -8366,7 +8390,7 @@ Types directly and then remove this alias. .. zeek:type:: assertion_failure - :source-code: base/init-bare.zeek 1006 1006 + :source-code: base/init-bare.zeek 1272 1272 :Type: :zeek:type:`hook` (cond: :zeek:type:`string`, msg: :zeek:type:`string`, bt: :zeek:type:`Backtrace`) : :zeek:type:`bool` @@ -8390,7 +8414,7 @@ Types .. zeek:see:: assertion_result .. zeek:type:: assertion_result - :source-code: base/init-bare.zeek 1028 1028 + :source-code: base/init-bare.zeek 1294 1294 :Type: :zeek:type:`hook` (result: :zeek:type:`bool`, cond: :zeek:type:`string`, msg: :zeek:type:`string`, bt: :zeek:type:`Backtrace`) : :zeek:type:`bool` @@ -8420,7 +8444,7 @@ Types .. zeek:see:: assertion_failure .. zeek:type:: bittorrent_benc_dir - :source-code: base/init-bare.zeek 4570 4570 + :source-code: base/init-bare.zeek 3148 3148 :Type: :zeek:type:`table` [:zeek:type:`string`] of :zeek:type:`bittorrent_benc_value` @@ -8429,7 +8453,7 @@ Types .. zeek:see:: bt_tracker_response .. zeek:type:: bittorrent_benc_value - :source-code: base/init-bare.zeek 4560 4565 + :source-code: base/init-bare.zeek 3138 3143 :Type: :zeek:type:`record` @@ -8451,7 +8475,7 @@ Types .. zeek:see:: bittorrent_benc_dir .. zeek:type:: bittorrent_peer - :source-code: base/init-bare.zeek 4546 4549 + :source-code: base/init-bare.zeek 3124 3127 :Type: :zeek:type:`record` @@ -8466,7 +8490,7 @@ Types .. zeek:see:: bittorrent_peer_set .. zeek:type:: bittorrent_peer_set - :source-code: base/init-bare.zeek 4554 4554 + :source-code: base/init-bare.zeek 3132 3132 :Type: :zeek:type:`set` [:zeek:type:`bittorrent_peer`] @@ -8475,7 +8499,7 @@ Types .. zeek:see:: bt_tracker_response .. zeek:type:: bt_tracker_headers - :source-code: base/init-bare.zeek 4576 4576 + :source-code: base/init-bare.zeek 3154 3154 :Type: :zeek:type:`table` [:zeek:type:`string`] of :zeek:type:`string` @@ -8485,7 +8509,7 @@ Types bt_tracker_response_not_ok .. zeek:type:: call_argument - :source-code: base/init-bare.zeek 956 965 + :source-code: base/init-bare.zeek 1222 1231 :Type: :zeek:type:`record` @@ -8508,7 +8532,7 @@ Types .. zeek:see:: call_argument_vector new_event backtrace print_backtrace .. zeek:type:: call_argument_vector - :source-code: base/init-bare.zeek 970 970 + :source-code: base/init-bare.zeek 1236 1236 :Type: :zeek:type:`vector` of :zeek:type:`call_argument` @@ -8547,7 +8571,7 @@ Types `. .. zeek:type:: connection - :source-code: base/init-bare.zeek 541 576 + :source-code: base/init-bare.zeek 782 817 :Type: :zeek:type:`record` @@ -8807,7 +8831,7 @@ Types directly and then remove this alias. .. zeek:type:: dns_answer - :source-code: base/init-bare.zeek 4297 4305 + :source-code: base/init-bare.zeek 3014 3022 :Type: :zeek:type:`record` @@ -8834,7 +8858,7 @@ Types dns_TXT_reply dns_WKS_reply .. zeek:type:: dns_binds_rr - :source-code: base/init-bare.zeek 4247 4256 + :source-code: base/init-bare.zeek 2964 2973 :Type: :zeek:type:`record` @@ -8867,7 +8891,7 @@ Types .. zeek:see:: dns_BINDS .. zeek:type:: dns_dnskey_rr - :source-code: base/init-bare.zeek 4190 4198 + :source-code: base/init-bare.zeek 2907 2915 :Type: :zeek:type:`record` @@ -8897,7 +8921,7 @@ Types .. zeek:see:: dns_DNSKEY .. zeek:type:: dns_ds_rr - :source-code: base/init-bare.zeek 4234 4242 + :source-code: base/init-bare.zeek 2951 2959 :Type: :zeek:type:`record` @@ -8927,7 +8951,7 @@ Types .. zeek:see:: dns_DS .. zeek:type:: dns_edns_additional - :source-code: base/init-bare.zeek 4101 4111 + :source-code: base/init-bare.zeek 2818 2828 :Type: :zeek:type:`record` @@ -8963,7 +8987,7 @@ Types .. zeek:see:: dns_EDNS_addl .. zeek:type:: dns_edns_cookie - :source-code: base/init-bare.zeek 4134 4137 + :source-code: base/init-bare.zeek 2851 2854 :Type: :zeek:type:`record` @@ -8978,7 +9002,7 @@ Types .. zeek:see:: dns_EDNS_cookie .. zeek:type:: dns_edns_ecs - :source-code: base/init-bare.zeek 4116 4121 + :source-code: base/init-bare.zeek 2833 2838 :Type: :zeek:type:`record` @@ -8999,7 +9023,7 @@ Types .. zeek:see:: dns_EDNS_ecs .. zeek:type:: dns_edns_tcp_keepalive - :source-code: base/init-bare.zeek 4126 4129 + :source-code: base/init-bare.zeek 2843 2846 :Type: :zeek:type:`record` @@ -9014,7 +9038,7 @@ Types .. zeek:see:: dns_EDNS_tcp_keepalive .. zeek:type:: dns_loc_rr - :source-code: base/init-bare.zeek 4261 4272 + :source-code: base/init-bare.zeek 2978 2989 :Type: :zeek:type:`record` @@ -9083,7 +9107,7 @@ Types .. zeek:type:: dns_msg - :source-code: base/init-bare.zeek 4064 4083 + :source-code: base/init-bare.zeek 2781 2800 :Type: :zeek:type:`record` @@ -9140,7 +9164,7 @@ Types dns_message dns_query_reply dns_rejected dns_request .. zeek:type:: dns_nsec3_rr - :source-code: base/init-bare.zeek 4203 4215 + :source-code: base/init-bare.zeek 2920 2932 :Type: :zeek:type:`record` @@ -9182,7 +9206,7 @@ Types .. zeek:see:: dns_NSEC3 .. zeek:type:: dns_nsec3param_rr - :source-code: base/init-bare.zeek 4220 4229 + :source-code: base/init-bare.zeek 2937 2946 :Type: :zeek:type:`record` @@ -9215,7 +9239,7 @@ Types .. zeek:see:: dns_NSEC3PARAM .. zeek:type:: dns_rrsig_rr - :source-code: base/init-bare.zeek 4172 4185 + :source-code: base/init-bare.zeek 2889 2902 :Type: :zeek:type:`record` @@ -9260,7 +9284,7 @@ Types .. zeek:see:: dns_RRSIG .. zeek:type:: dns_soa - :source-code: base/init-bare.zeek 4088 4096 + :source-code: base/init-bare.zeek 2805 2813 :Type: :zeek:type:`record` @@ -9290,7 +9314,7 @@ Types .. zeek:see:: dns_SOA_reply .. zeek:type:: dns_svcb_rr - :source-code: base/init-bare.zeek 4277 4280 + :source-code: base/init-bare.zeek 2994 2997 :Type: :zeek:type:`record` @@ -9305,7 +9329,7 @@ Types .. zeek:see:: dns_SVCB dns_HTTPS .. zeek:type:: dns_tkey - :source-code: base/init-bare.zeek 4142 4152 + :source-code: base/init-bare.zeek 2859 2869 :Type: :zeek:type:`record` @@ -9341,7 +9365,7 @@ Types .. zeek:see:: dns_TKEY .. zeek:type:: dns_tsig_additional - :source-code: base/init-bare.zeek 4157 4167 + :source-code: base/init-bare.zeek 2874 2884 :Type: :zeek:type:`record` @@ -9388,7 +9412,7 @@ Types directly and then remove this alias. .. zeek:type:: endpoint - :source-code: base/init-bare.zeek 516 535 + :source-code: base/init-bare.zeek 757 776 :Type: :zeek:type:`record` @@ -9422,7 +9446,7 @@ Types .. zeek:see:: connection .. zeek:type:: endpoint_stats - :source-code: base/init-bare.zeek 378 390 + :source-code: base/init-bare.zeek 362 374 :Type: :zeek:type:`record` @@ -9455,7 +9479,7 @@ Types .. zeek:see:: conn_stats .. zeek:type:: entropy_test_result - :source-code: base/init-bare.zeek 1198 1204 + :source-code: base/init-bare.zeek 1464 1470 :Type: :zeek:type:`record` @@ -9482,7 +9506,7 @@ Types .. zeek:see:: entropy_test_add entropy_test_finish entropy_test_init find_entropy .. zeek:type:: fa_file - :source-code: base/init-bare.zeek 604 656 + :source-code: base/init-bare.zeek 833 885 :Type: :zeek:type:`record` @@ -9566,7 +9590,7 @@ Types cases where there isn't a filename to be had. .. zeek:type:: fa_metadata - :source-code: base/init-bare.zeek 666 674 + :source-code: base/init-bare.zeek 895 903 :Type: :zeek:type:`record` @@ -9618,7 +9642,7 @@ Types them with :zeek:id:`get_port_transport_proto`. .. zeek:type:: from_json_result - :source-code: base/init-bare.zeek 1215 1218 + :source-code: base/init-bare.zeek 1481 1484 :Type: :zeek:type:`record` @@ -9653,7 +9677,7 @@ Types parse_ftp_port .. zeek:type:: geo_autonomous_system - :source-code: base/init-bare.zeek 1160 1163 + :source-code: base/init-bare.zeek 1426 1429 :Type: :zeek:type:`record` @@ -9669,7 +9693,7 @@ Types .. zeek:see:: lookup_autonomous_system .. zeek:type:: geo_location - :source-code: base/init-bare.zeek 1149 1155 + :source-code: base/init-bare.zeek 1415 1421 :Type: :zeek:type:`record` @@ -9694,37 +9718,37 @@ Types .. zeek:see:: lookup_location .. zeek:type:: gtp_access_point_name - :source-code: base/init-bare.zeek 2047 2047 + :source-code: base/init-bare.zeek 2313 2313 :Type: :zeek:type:`string` .. zeek:type:: gtp_cause - :source-code: base/init-bare.zeek 2029 2029 + :source-code: base/init-bare.zeek 2295 2295 :Type: :zeek:type:`count` .. zeek:type:: gtp_charging_characteristics - :source-code: base/init-bare.zeek 2045 2045 + :source-code: base/init-bare.zeek 2311 2311 :Type: :zeek:type:`count` .. zeek:type:: gtp_charging_gateway_addr - :source-code: base/init-bare.zeek 2037 2037 + :source-code: base/init-bare.zeek 2303 2303 :Type: :zeek:type:`addr` .. zeek:type:: gtp_charging_id - :source-code: base/init-bare.zeek 2036 2036 + :source-code: base/init-bare.zeek 2302 2302 :Type: :zeek:type:`count` .. zeek:type:: gtp_create_pdp_ctx_request_elements - :source-code: base/init-bare.zeek 2085 2108 + :source-code: base/init-bare.zeek 2351 2374 :Type: :zeek:type:`record` @@ -9774,7 +9798,7 @@ Types .. zeek:type:: gtp_create_pdp_ctx_response_elements - :source-code: base/init-bare.zeek 2110 2124 + :source-code: base/init-bare.zeek 2376 2390 :Type: :zeek:type:`record` @@ -9806,7 +9830,7 @@ Types .. zeek:type:: gtp_delete_pdp_ctx_request_elements - :source-code: base/init-bare.zeek 2158 2162 + :source-code: base/init-bare.zeek 2424 2428 :Type: :zeek:type:`record` @@ -9818,7 +9842,7 @@ Types .. zeek:type:: gtp_delete_pdp_ctx_response_elements - :source-code: base/init-bare.zeek 2164 2167 + :source-code: base/init-bare.zeek 2430 2433 :Type: :zeek:type:`record` @@ -9828,7 +9852,7 @@ Types .. zeek:type:: gtp_end_user_addr - :source-code: base/init-bare.zeek 2059 2066 + :source-code: base/init-bare.zeek 2325 2332 :Type: :zeek:type:`record` @@ -9844,7 +9868,7 @@ Types .. zeek:type:: gtp_gsn_addr - :source-code: base/init-bare.zeek 2050 2057 + :source-code: base/init-bare.zeek 2316 2323 :Type: :zeek:type:`record` @@ -9858,31 +9882,31 @@ Types .. zeek:type:: gtp_imsi - :source-code: base/init-bare.zeek 2030 2030 + :source-code: base/init-bare.zeek 2296 2296 :Type: :zeek:type:`count` .. zeek:type:: gtp_msisdn - :source-code: base/init-bare.zeek 2048 2048 + :source-code: base/init-bare.zeek 2314 2314 :Type: :zeek:type:`string` .. zeek:type:: gtp_nsapi - :source-code: base/init-bare.zeek 2032 2032 + :source-code: base/init-bare.zeek 2298 2298 :Type: :zeek:type:`count` .. zeek:type:: gtp_omc_id - :source-code: base/init-bare.zeek 2042 2042 + :source-code: base/init-bare.zeek 2308 2308 :Type: :zeek:type:`string` .. zeek:type:: gtp_private_extension - :source-code: base/init-bare.zeek 2080 2083 + :source-code: base/init-bare.zeek 2346 2349 :Type: :zeek:type:`record` @@ -9892,13 +9916,13 @@ Types .. zeek:type:: gtp_proto_config_options - :source-code: base/init-bare.zeek 2044 2044 + :source-code: base/init-bare.zeek 2310 2310 :Type: :zeek:type:`string` .. zeek:type:: gtp_qos_profile - :source-code: base/init-bare.zeek 2075 2078 + :source-code: base/init-bare.zeek 2341 2344 :Type: :zeek:type:`record` @@ -9908,7 +9932,7 @@ Types .. zeek:type:: gtp_rai - :source-code: base/init-bare.zeek 2068 2073 + :source-code: base/init-bare.zeek 2334 2339 :Type: :zeek:type:`record` @@ -9922,67 +9946,67 @@ Types .. zeek:type:: gtp_recovery - :source-code: base/init-bare.zeek 2033 2033 + :source-code: base/init-bare.zeek 2299 2299 :Type: :zeek:type:`count` .. zeek:type:: gtp_reordering_required - :source-code: base/init-bare.zeek 2043 2043 + :source-code: base/init-bare.zeek 2309 2309 :Type: :zeek:type:`bool` .. zeek:type:: gtp_selection_mode - :source-code: base/init-bare.zeek 2046 2046 + :source-code: base/init-bare.zeek 2312 2312 :Type: :zeek:type:`count` .. zeek:type:: gtp_teardown_ind - :source-code: base/init-bare.zeek 2031 2031 + :source-code: base/init-bare.zeek 2297 2297 :Type: :zeek:type:`bool` .. zeek:type:: gtp_teid1 - :source-code: base/init-bare.zeek 2034 2034 + :source-code: base/init-bare.zeek 2300 2300 :Type: :zeek:type:`count` .. zeek:type:: gtp_teid_control_plane - :source-code: base/init-bare.zeek 2035 2035 + :source-code: base/init-bare.zeek 2301 2301 :Type: :zeek:type:`count` .. zeek:type:: gtp_tft - :source-code: base/init-bare.zeek 2040 2040 + :source-code: base/init-bare.zeek 2306 2306 :Type: :zeek:type:`string` .. zeek:type:: gtp_trace_reference - :source-code: base/init-bare.zeek 2038 2038 + :source-code: base/init-bare.zeek 2304 2304 :Type: :zeek:type:`count` .. zeek:type:: gtp_trace_type - :source-code: base/init-bare.zeek 2039 2039 + :source-code: base/init-bare.zeek 2305 2305 :Type: :zeek:type:`count` .. zeek:type:: gtp_trigger_id - :source-code: base/init-bare.zeek 2041 2041 + :source-code: base/init-bare.zeek 2307 2307 :Type: :zeek:type:`string` .. zeek:type:: gtp_update_pdp_ctx_request_elements - :source-code: base/init-bare.zeek 2126 2143 + :source-code: base/init-bare.zeek 2392 2409 :Type: :zeek:type:`record` @@ -10020,7 +10044,7 @@ Types .. zeek:type:: gtp_update_pdp_ctx_response_elements - :source-code: base/init-bare.zeek 2145 2156 + :source-code: base/init-bare.zeek 2411 2422 :Type: :zeek:type:`record` @@ -10046,7 +10070,7 @@ Types .. zeek:type:: gtpv1_hdr - :source-code: base/init-bare.zeek 1992 2027 + :source-code: base/init-bare.zeek 2258 2293 :Type: :zeek:type:`record` @@ -10099,7 +10123,7 @@ Types A GTPv1 (GPRS Tunneling Protocol) header. .. zeek:type:: http_message_stat - :source-code: base/init-bare.zeek 4346 4359 + :source-code: base/init-bare.zeek 3063 3076 :Type: :zeek:type:`record` @@ -10126,7 +10150,7 @@ Types .. zeek:see:: http_message_done .. zeek:type:: http_stats_rec - :source-code: base/init-bare.zeek 4336 4341 + :source-code: base/init-bare.zeek 3053 3058 :Type: :zeek:type:`record` @@ -10262,7 +10286,7 @@ Types .. zeek:see:: icmp_time_exceeded icmp_unreachable .. zeek:type:: icmp_hdr - :source-code: base/init-bare.zeek 1912 1914 + :source-code: base/init-bare.zeek 2178 2180 :Type: :zeek:type:`record` @@ -10300,7 +10324,7 @@ Types icmp_time_exceeded icmp_unreachable .. zeek:type:: id_table - :source-code: base/init-bare.zeek 928 928 + :source-code: base/init-bare.zeek 1194 1194 :Type: :zeek:type:`table` [:zeek:type:`string`] of :zeek:type:`script_id` @@ -10347,7 +10371,7 @@ Types directly and then remove this alias. .. zeek:type:: ip4_hdr - :source-code: base/init-bare.zeek 1859 1872 + :source-code: base/init-bare.zeek 2125 2138 :Type: :zeek:type:`record` @@ -10392,7 +10416,7 @@ Types .. zeek:see:: pkt_hdr ip6_hdr discarder_check_ip .. zeek:type:: ip6_ah - :source-code: base/init-bare.zeek 1633 1647 + :source-code: base/init-bare.zeek 1899 1913 :Type: :zeek:type:`record` @@ -10420,7 +10444,7 @@ Types .. zeek:see:: pkt_hdr ip4_hdr ip6_hdr ip6_ext_hdr .. zeek:type:: ip6_dstopts - :source-code: base/init-bare.zeek 1584 1592 + :source-code: base/init-bare.zeek 1850 1858 :Type: :zeek:type:`record` @@ -10439,7 +10463,7 @@ Types .. zeek:see:: pkt_hdr ip4_hdr ip6_hdr ip6_ext_hdr ip6_option .. zeek:type:: ip6_esp - :source-code: base/init-bare.zeek 1652 1657 + :source-code: base/init-bare.zeek 1918 1923 :Type: :zeek:type:`record` @@ -10454,7 +10478,7 @@ Types .. zeek:see:: pkt_hdr ip4_hdr ip6_hdr ip6_ext_hdr .. zeek:type:: ip6_ext_hdr - :source-code: base/init-bare.zeek 1816 1834 + :source-code: base/init-bare.zeek 2082 2100 :Type: :zeek:type:`record` @@ -10489,14 +10513,14 @@ Types ip6_ah ip6_esp .. zeek:type:: ip6_ext_hdr_chain - :source-code: base/init-bare.zeek 1837 1837 + :source-code: base/init-bare.zeek 2103 2103 :Type: :zeek:type:`vector` of :zeek:type:`ip6_ext_hdr` A type alias for a vector of IPv6 extension headers. .. zeek:type:: ip6_fragment - :source-code: base/init-bare.zeek 1614 1628 + :source-code: base/init-bare.zeek 1880 1894 :Type: :zeek:type:`record` @@ -10524,7 +10548,7 @@ Types .. zeek:see:: pkt_hdr ip4_hdr ip6_hdr ip6_ext_hdr .. zeek:type:: ip6_hdr - :source-code: base/init-bare.zeek 1843 1854 + :source-code: base/init-bare.zeek 2109 2120 :Type: :zeek:type:`record` @@ -10560,7 +10584,7 @@ Types ip6_routing ip6_fragment ip6_ah ip6_esp .. zeek:type:: ip6_hopopts - :source-code: base/init-bare.zeek 1571 1579 + :source-code: base/init-bare.zeek 1837 1845 :Type: :zeek:type:`record` @@ -10579,7 +10603,7 @@ Types .. zeek:see:: pkt_hdr ip4_hdr ip6_hdr ip6_ext_hdr ip6_option .. zeek:type:: ip6_mobility_back - :source-code: base/init-bare.zeek 1744 1755 + :source-code: base/init-bare.zeek 2010 2021 :Type: :zeek:type:`record` @@ -10603,7 +10627,7 @@ Types .. zeek:see:: ip6_mobility_hdr ip6_hdr ip6_ext_hdr ip6_mobility_msg .. zeek:type:: ip6_mobility_be - :source-code: base/init-bare.zeek 1760 1767 + :source-code: base/init-bare.zeek 2026 2033 :Type: :zeek:type:`record` @@ -10621,7 +10645,7 @@ Types .. zeek:see:: ip6_mobility_hdr ip6_hdr ip6_ext_hdr ip6_mobility_msg .. zeek:type:: ip6_mobility_brr - :source-code: base/init-bare.zeek 1662 1667 + :source-code: base/init-bare.zeek 1928 1933 :Type: :zeek:type:`record` @@ -10636,7 +10660,7 @@ Types .. zeek:see:: ip6_mobility_hdr ip6_hdr ip6_ext_hdr ip6_mobility_msg .. zeek:type:: ip6_mobility_bu - :source-code: base/init-bare.zeek 1724 1739 + :source-code: base/init-bare.zeek 1990 2005 :Type: :zeek:type:`record` @@ -10666,7 +10690,7 @@ Types .. zeek:see:: ip6_mobility_hdr ip6_hdr ip6_ext_hdr ip6_mobility_msg .. zeek:type:: ip6_mobility_cot - :source-code: base/init-bare.zeek 1710 1719 + :source-code: base/init-bare.zeek 1976 1985 :Type: :zeek:type:`record` @@ -10687,7 +10711,7 @@ Types .. zeek:see:: ip6_mobility_hdr ip6_hdr ip6_ext_hdr ip6_mobility_msg .. zeek:type:: ip6_mobility_coti - :source-code: base/init-bare.zeek 1684 1691 + :source-code: base/init-bare.zeek 1950 1957 :Type: :zeek:type:`record` @@ -10705,7 +10729,7 @@ Types .. zeek:see:: ip6_mobility_hdr ip6_hdr ip6_ext_hdr ip6_mobility_msg .. zeek:type:: ip6_mobility_hdr - :source-code: base/init-bare.zeek 1796 1810 + :source-code: base/init-bare.zeek 2062 2076 :Type: :zeek:type:`record` @@ -10733,7 +10757,7 @@ Types .. zeek:see:: pkt_hdr ip4_hdr ip6_hdr ip6_ext_hdr .. zeek:type:: ip6_mobility_hot - :source-code: base/init-bare.zeek 1696 1705 + :source-code: base/init-bare.zeek 1962 1971 :Type: :zeek:type:`record` @@ -10754,7 +10778,7 @@ Types .. zeek:see:: ip6_mobility_hdr ip6_hdr ip6_ext_hdr ip6_mobility_msg .. zeek:type:: ip6_mobility_hoti - :source-code: base/init-bare.zeek 1672 1679 + :source-code: base/init-bare.zeek 1938 1945 :Type: :zeek:type:`record` @@ -10772,7 +10796,7 @@ Types .. zeek:see:: ip6_mobility_hdr ip6_hdr ip6_ext_hdr ip6_mobility_msg .. zeek:type:: ip6_mobility_msg - :source-code: base/init-bare.zeek 1772 1791 + :source-code: base/init-bare.zeek 2038 2057 :Type: :zeek:type:`record` @@ -10808,7 +10832,7 @@ Types .. zeek:see:: ip6_mobility_hdr ip6_hdr ip6_ext_hdr .. zeek:type:: ip6_option - :source-code: base/init-bare.zeek 1559 1563 + :source-code: base/init-bare.zeek 1825 1829 :Type: :zeek:type:`record` @@ -10827,14 +10851,14 @@ Types .. zeek:see:: ip6_hdr ip6_ext_hdr ip6_hopopts ip6_dstopts .. zeek:type:: ip6_options - :source-code: base/init-bare.zeek 1566 1566 + :source-code: base/init-bare.zeek 1832 1832 :Type: :zeek:type:`vector` of :zeek:type:`ip6_option` A type alias for a vector of IPv6 options. .. zeek:type:: ip6_routing - :source-code: base/init-bare.zeek 1597 1609 + :source-code: base/init-bare.zeek 1863 1875 :Type: :zeek:type:`record` @@ -10859,7 +10883,7 @@ Types .. zeek:see:: pkt_hdr ip4_hdr ip6_hdr ip6_ext_hdr .. zeek:type:: irc_join_info - :source-code: base/init-bare.zeek 4382 4387 + :source-code: base/init-bare.zeek 3099 3104 :Type: :zeek:type:`record` @@ -10876,7 +10900,7 @@ Types .. zeek:see:: irc_join_list .. zeek:type:: irc_join_list - :source-code: base/init-bare.zeek 4392 4392 + :source-code: base/init-bare.zeek 3109 3109 :Type: :zeek:type:`set` [:zeek:type:`irc_join_info`] @@ -10885,7 +10909,7 @@ Types .. zeek:see:: irc_join_message .. zeek:type:: l2_hdr - :source-code: base/init-bare.zeek 1930 1940 + :source-code: base/init-bare.zeek 2196 2206 :Type: :zeek:type:`record` @@ -10921,7 +10945,7 @@ Types .. zeek:see:: pkt_hdr .. zeek:type:: mime_header_list - :source-code: base/init-bare.zeek 2393 2393 + :source-code: base/init-bare.zeek 2659 2659 :Type: :zeek:type:`table` [:zeek:type:`count`] of :zeek:type:`mime_header_rec` @@ -10930,7 +10954,7 @@ Types .. zeek:see:: mime_header_rec http_all_headers mime_all_headers .. zeek:type:: mime_header_rec - :source-code: base/init-bare.zeek 2384 2388 + :source-code: base/init-bare.zeek 2650 2654 :Type: :zeek:type:`record` @@ -10976,7 +11000,7 @@ Types :zeek:see:`file_magic` .. zeek:type:: pcap_packet - :source-code: base/init-bare.zeek 1137 1144 + :source-code: base/init-bare.zeek 1403 1410 :Type: :zeek:type:`record` @@ -11005,7 +11029,7 @@ Types .. zeek:see:: dump_packet get_current_packet .. zeek:type:: pkt_hdr - :source-code: base/init-bare.zeek 1919 1925 + :source-code: base/init-bare.zeek 2185 2191 :Type: :zeek:type:`record` @@ -11029,7 +11053,7 @@ Types .. zeek:see:: new_packet .. zeek:type:: pkt_profile_modes - :source-code: base/init-bare.zeek 5197 5203 + :source-code: base/init-bare.zeek 2752 2758 :Type: :zeek:type:`enum` @@ -11054,7 +11078,7 @@ Types .. zeek:see:: pkt_profile_mode pkt_profile_freq pkt_profile_file .. zeek:type:: pm_callit_request - :source-code: base/init-bare.zeek 2431 2436 + :source-code: base/init-bare.zeek 2697 2702 :Type: :zeek:type:`record` @@ -11075,7 +11099,7 @@ Types .. zeek:see:: pm_attempt_callit pm_request_callit .. zeek:type:: pm_mapping - :source-code: base/init-bare.zeek 2408 2412 + :source-code: base/init-bare.zeek 2674 2678 :Type: :zeek:type:`record` @@ -11093,7 +11117,7 @@ Types .. zeek:see:: pm_mappings .. zeek:type:: pm_mappings - :source-code: base/init-bare.zeek 2417 2417 + :source-code: base/init-bare.zeek 2683 2683 :Type: :zeek:type:`table` [:zeek:type:`count`] of :zeek:type:`pm_mapping` @@ -11102,7 +11126,7 @@ Types .. zeek:see:: pm_request_dump .. zeek:type:: pm_port_request - :source-code: base/init-bare.zeek 2422 2426 + :source-code: base/init-bare.zeek 2688 2692 :Type: :zeek:type:`record` @@ -11120,13 +11144,13 @@ Types .. zeek:see:: pm_attempt_getport pm_request_getport .. zeek:type:: psk_identity_vec - :source-code: base/init-bare.zeek 4665 4665 + :source-code: base/init-bare.zeek 4934 4934 :Type: :zeek:type:`vector` of :zeek:type:`SSL::PSKIdentity` .. zeek:type:: raw_pkt_hdr - :source-code: base/init-bare.zeek 1946 1953 + :source-code: base/init-bare.zeek 2212 2219 :Type: :zeek:type:`record` @@ -11154,7 +11178,7 @@ Types .. zeek:see:: raw_packet pkt_hdr .. zeek:type:: record_field - :source-code: base/init-bare.zeek 933 941 + :source-code: base/init-bare.zeek 1199 1207 :Type: :zeek:type:`record` @@ -11179,7 +11203,7 @@ Types .. zeek:see:: record_fields record_field_table .. zeek:type:: record_field_table - :source-code: base/init-bare.zeek 951 951 + :source-code: base/init-bare.zeek 1217 1217 :Type: :zeek:type:`table` [:zeek:type:`string`] of :zeek:type:`record_field` @@ -11193,7 +11217,7 @@ Types directly and then remove this alias. .. zeek:type:: rotate_info - :source-code: base/init-bare.zeek 1074 1079 + :source-code: base/init-bare.zeek 1340 1345 :Type: :zeek:type:`record` @@ -11212,7 +11236,7 @@ Types .. zeek:see:: rotate_file rotate_file_by_name .. zeek:type:: script_id - :source-code: base/init-bare.zeek 909 918 + :source-code: base/init-bare.zeek 1175 1184 :Type: :zeek:type:`record` @@ -11245,7 +11269,7 @@ Types .. zeek:see:: global_ids id_table .. zeek:type:: signature_and_hashalgorithm_vec - :source-code: base/init-bare.zeek 4663 4663 + :source-code: base/init-bare.zeek 4932 4932 :Type: :zeek:type:`vector` of :zeek:type:`SSL::SignatureAndHashAlgorithm` @@ -11256,7 +11280,7 @@ Types directly and then remove this alias. .. zeek:type:: signature_state - :source-code: base/init-bare.zeek 4536 4541 + :source-code: base/init-bare.zeek 3114 3119 :Type: :zeek:type:`record` @@ -11277,7 +11301,7 @@ Types .. zeek:see:: signature_match .. zeek:type:: string_any_file_hook - :source-code: base/init-bare.zeek 663 663 + :source-code: base/init-bare.zeek 892 892 :Type: :zeek:type:`hook` (f: :zeek:type:`fa_file`, e: :zeek:type:`any`, str: :zeek:type:`string`) : :zeek:type:`bool` @@ -11366,7 +11390,7 @@ Types directly and then remove this alias. .. zeek:type:: sw_align - :source-code: base/init-bare.zeek 1103 1106 + :source-code: base/init-bare.zeek 1369 1372 :Type: :zeek:type:`record` @@ -11381,7 +11405,7 @@ Types .. zeek:see:: str_smith_waterman sw_substring_vec sw_substring sw_align_vec sw_params .. zeek:type:: sw_align_vec - :source-code: base/init-bare.zeek 1111 1111 + :source-code: base/init-bare.zeek 1377 1377 :Type: :zeek:type:`vector` of :zeek:type:`sw_align` @@ -11390,7 +11414,7 @@ Types .. zeek:see:: str_smith_waterman sw_substring_vec sw_substring sw_align sw_params .. zeek:type:: sw_params - :source-code: base/init-bare.zeek 1092 1098 + :source-code: base/init-bare.zeek 1358 1364 :Type: :zeek:type:`record` @@ -11405,7 +11429,7 @@ Types .. zeek:see:: str_smith_waterman .. zeek:type:: sw_substring - :source-code: base/init-bare.zeek 1117 1121 + :source-code: base/init-bare.zeek 1383 1387 :Type: :zeek:type:`record` @@ -11424,7 +11448,7 @@ Types .. zeek:type:: sw_substring_vec - :source-code: base/init-bare.zeek 1130 1130 + :source-code: base/init-bare.zeek 1396 1396 :Type: :zeek:type:`vector` of :zeek:type:`sw_substring` @@ -11459,7 +11483,7 @@ Types directly and then remove this alias. .. zeek:type:: tcp_hdr - :source-code: base/init-bare.zeek 1888 1898 + :source-code: base/init-bare.zeek 2154 2164 :Type: :zeek:type:`record` @@ -11495,7 +11519,7 @@ Types .. zeek:see:: pkt_hdr discarder_check_tcp .. zeek:type:: teredo_auth - :source-code: base/init-bare.zeek 1960 1968 + :source-code: base/init-bare.zeek 2226 2234 :Type: :zeek:type:`record` @@ -11522,7 +11546,7 @@ Types teredo_hdr .. zeek:type:: teredo_hdr - :source-code: base/init-bare.zeek 1985 1989 + :source-code: base/init-bare.zeek 2251 2255 :Type: :zeek:type:`record` @@ -11541,7 +11565,7 @@ Types .. zeek:see:: teredo_bubble teredo_origin_indication teredo_authentication .. zeek:type:: teredo_origin - :source-code: base/init-bare.zeek 1976 1979 + :source-code: base/init-bare.zeek 2242 2245 :Type: :zeek:type:`record` @@ -11582,7 +11606,7 @@ Types "connection" broadly, using flow semantics for ICMP and UDP. .. zeek:type:: udp_hdr - :source-code: base/init-bare.zeek 1903 1907 + :source-code: base/init-bare.zeek 2169 2173 :Type: :zeek:type:`record` @@ -11600,7 +11624,7 @@ Types .. zeek:see:: pkt_hdr discarder_check_udp .. zeek:type:: var_sizes - :source-code: base/init-bare.zeek 904 904 + :source-code: base/init-bare.zeek 1170 1170 :Type: :zeek:type:`table` [:zeek:type:`string`] of :zeek:type:`count` @@ -11645,21 +11669,21 @@ Hooks Functions ######### .. zeek:id:: add_interface - :source-code: base/init-bare.zeek 2183 2189 + :source-code: base/init-bare.zeek 2449 2455 :Type: :zeek:type:`function` (iold: :zeek:type:`string`, inew: :zeek:type:`string`) : :zeek:type:`string` Internal function. .. zeek:id:: add_signature_file - :source-code: base/init-bare.zeek 2196 2202 + :source-code: base/init-bare.zeek 2462 2468 :Type: :zeek:type:`function` (sold: :zeek:type:`string`, snew: :zeek:type:`string`) : :zeek:type:`string` Internal function. .. zeek:id:: discarder_check_icmp - :source-code: base/init-bare.zeek 2288 2288 + :source-code: base/init-bare.zeek 2554 2554 :Type: :zeek:type:`function` (p: :zeek:type:`pkt_hdr`) : :zeek:type:`bool` @@ -11681,7 +11705,7 @@ Functions Avoid using it. .. zeek:id:: discarder_check_ip - :source-code: base/init-bare.zeek 2236 2236 + :source-code: base/init-bare.zeek 2502 2502 :Type: :zeek:type:`function` (p: :zeek:type:`pkt_hdr`) : :zeek:type:`bool` @@ -11703,7 +11727,7 @@ Functions Avoid using it. .. zeek:id:: discarder_check_tcp - :source-code: base/init-bare.zeek 2254 2254 + :source-code: base/init-bare.zeek 2520 2520 :Type: :zeek:type:`function` (p: :zeek:type:`pkt_hdr`, d: :zeek:type:`string`) : :zeek:type:`bool` @@ -11728,7 +11752,7 @@ Functions Avoid using it. .. zeek:id:: discarder_check_udp - :source-code: base/init-bare.zeek 2272 2272 + :source-code: base/init-bare.zeek 2538 2538 :Type: :zeek:type:`function` (p: :zeek:type:`pkt_hdr`, d: :zeek:type:`string`) : :zeek:type:`bool` @@ -11753,14 +11777,14 @@ Functions Avoid using it. .. zeek:id:: from_json_default_key_mapper - :source-code: base/init-bare.zeek 1207 1210 + :source-code: base/init-bare.zeek 1473 1476 :Type: :zeek:type:`function` (s: :zeek:type:`string`) : :zeek:type:`string` The default JSON key mapper function. Identity function. .. zeek:id:: max_count - :source-code: base/init-bare.zeek 2358 2359 + :source-code: base/init-bare.zeek 2624 2625 :Type: :zeek:type:`function` (a: :zeek:type:`count`, b: :zeek:type:`count`) : :zeek:type:`count` @@ -11775,7 +11799,7 @@ Functions :returns: The maximum of *a* and *b*. .. zeek:id:: max_double - :source-code: base/init-bare.zeek 2326 2327 + :source-code: base/init-bare.zeek 2592 2593 :Type: :zeek:type:`function` (a: :zeek:type:`double`, b: :zeek:type:`double`) : :zeek:type:`double` @@ -11790,7 +11814,7 @@ Functions :returns: The maximum of *a* and *b*. .. zeek:id:: max_interval - :source-code: base/init-bare.zeek 2342 2343 + :source-code: base/init-bare.zeek 2608 2609 :Type: :zeek:type:`function` (a: :zeek:type:`interval`, b: :zeek:type:`interval`) : :zeek:type:`interval` @@ -11805,7 +11829,7 @@ Functions :returns: The maximum of *a* and *b*. .. zeek:id:: min_count - :source-code: base/init-bare.zeek 2350 2351 + :source-code: base/init-bare.zeek 2616 2617 :Type: :zeek:type:`function` (a: :zeek:type:`count`, b: :zeek:type:`count`) : :zeek:type:`count` @@ -11820,7 +11844,7 @@ Functions :returns: The minimum of *a* and *b*. .. zeek:id:: min_double - :source-code: base/init-bare.zeek 2318 2319 + :source-code: base/init-bare.zeek 2584 2585 :Type: :zeek:type:`function` (a: :zeek:type:`double`, b: :zeek:type:`double`) : :zeek:type:`double` @@ -11835,7 +11859,7 @@ Functions :returns: The minimum of *a* and *b*. .. zeek:id:: min_interval - :source-code: base/init-bare.zeek 2334 2335 + :source-code: base/init-bare.zeek 2600 2601 :Type: :zeek:type:`function` (a: :zeek:type:`interval`, b: :zeek:type:`interval`) : :zeek:type:`interval` diff --git a/scripts/policy/frameworks/telemetry/log.zeek.rst b/scripts/policy/frameworks/telemetry/log.zeek.rst index 5086b639d..009fdd0f6 100644 --- a/scripts/policy/frameworks/telemetry/log.zeek.rst +++ b/scripts/policy/frameworks/telemetry/log.zeek.rst @@ -4,8 +4,8 @@ policy/frameworks/telemetry/log.zeek ==================================== .. zeek:namespace:: Telemetry -Implementation of a telemetry.log and telemetry_histogram.log file -using metrics accessible via the Telemetry module. +Implementation of a :file:`telemetry.log` and :file:`telemetry_histogram.log` +file using metrics accessible via the Telemetry module. :Namespace: Telemetry :Imports: :doc:`base/frameworks/telemetry `