Skip to content

Commit

Permalink
Update local.zeek
Browse files Browse the repository at this point in the history
  • Loading branch information
piercema authored Oct 15, 2024
1 parent 2df7097 commit a21a440
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions zeek/config/local.zeek
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
##! https://docs.zeek.org/en/stable/script-reference/scripts.html
##! https://github.com/zeek/zeek/blob/master/scripts/site/local.zeek

global true_regex: pattern = /^\s*(?i:t(rue)?|y(es)?|on|1)\s*$/;
global true_regex: pattern = /^\s*(?i:t(rue)?|y(es)?|on|1)\s*$/;

global disable_stats = (getenv("ZEEK_DISABLE_STATS") == true_regex) ? T : F;
global disable_hash_all_files = (getenv("ZEEK_DISABLE_HASH_ALL_FILES") == true_regex) ? T : F;
Expand Down Expand Up @@ -44,7 +44,6 @@ global disable_ics_profinet_io_cm = (getenv("ZEEK_DISABLE_ICS_PROFINET_IO_CM") =
global disable_ics_s7comm = (getenv("ZEEK_DISABLE_ICS_S7COMM") == true_regex) ? T : F;
global disable_ics_synchrophasor = (getenv("ZEEK_DISABLE_ICS_SYNCHROPHASOR") == true_regex) ? T : F;


redef Broker::default_listen_address = "127.0.0.1";
redef ignore_checksums = T;

Expand Down Expand Up @@ -115,6 +114,7 @@ global json_format = (getenv("ZEEK_JSON") == true_regex) ? T : F;
@load custom

event zeek_init() &priority=-5 {

if (zeek_local_nets_str != "") {
local nets_strs = split_string(zeek_local_nets_str, /,/);
if (|nets_strs| > 0) {
Expand Down

0 comments on commit a21a440

Please sign in to comment.