Source code for zlogging.enum.zeek

# -*- coding: utf-8 -*-
# pylint: disable=line-too-long,import-error
"""Namespace: ``zeek``."""

from zlogging._compat import enum


[docs]@enum.unique class TableChange(enum.IntFlag): """Enum: ``TableChange``. See Also: `base/bif/types.bif.zeek <https://docs.zeek.org/en/stable/scripts/base/bif/types.bif.zeek.html#type-TableChange>`__ """ _ignore_ = 'TableChange _' TableChange = vars() TableChange['TABLE_ELEMENT_NEW'] = enum.auto() TableChange['TABLE_ELEMENT_CHANGED'] = enum.auto() TableChange['TABLE_ELEMENT_REMOVED'] = enum.auto() TableChange['TABLE_ELEMENT_EXPIRED'] = enum.auto()
[docs]@enum.unique class layer3_proto(enum.IntFlag): """Enum: ``layer3_proto``. See Also: `base/bif/types.bif.zeek <https://docs.zeek.org/en/stable/scripts/base/bif/types.bif.zeek.html#type-layer3_proto>`__ """ _ignore_ = 'layer3_proto _' layer3_proto = vars() layer3_proto['L3_IPV4'] = enum.auto() layer3_proto['L3_IPV6'] = enum.auto() layer3_proto['L3_ARP'] = enum.auto() layer3_proto['L3_UNKNOWN'] = enum.auto()
[docs]@enum.unique class rpc_status(enum.IntFlag): """Enum: ``rpc_status``. See Also: `base/bif/types.bif.zeek <https://docs.zeek.org/en/stable/scripts/base/bif/types.bif.zeek.html#type-rpc_status>`__ """ _ignore_ = 'rpc_status _' rpc_status = vars() rpc_status['RPC_SUCCESS'] = enum.auto() rpc_status['RPC_PROG_UNAVAIL'] = enum.auto() rpc_status['RPC_PROG_MISMATCH'] = enum.auto() rpc_status['RPC_PROC_UNAVAIL'] = enum.auto() rpc_status['RPC_GARBAGE_ARGS'] = enum.auto() rpc_status['RPC_SYSTEM_ERR'] = enum.auto() rpc_status['RPC_TIMEOUT'] = enum.auto() rpc_status['RPC_VERS_MISMATCH'] = enum.auto() rpc_status['RPC_AUTH_ERROR'] = enum.auto() rpc_status['RPC_UNKNOWN_ERROR'] = enum.auto()
[docs]@enum.unique class IPAddrAnonymization(enum.IntFlag): """Enum: ``IPAddrAnonymization``. See also: ``anonymize_addr``. See Also: `base/init-bare.zeek <https://docs.zeek.org/en/stable/scripts/base/init-bare.zeek.html#type-IPAddrAnonymization>`__ """ _ignore_ = 'IPAddrAnonymization _' IPAddrAnonymization = vars() IPAddrAnonymization['KEEP_ORIG_ADDR'] = enum.auto() IPAddrAnonymization['SEQUENTIALLY_NUMBERED'] = enum.auto() IPAddrAnonymization['RANDOM_MD5'] = enum.auto() IPAddrAnonymization['PREFIX_PRESERVING_A50'] = enum.auto() IPAddrAnonymization['PREFIX_PRESERVING_MD5'] = enum.auto()
[docs]@enum.unique class IPAddrAnonymizationClass(enum.IntFlag): """Enum: ``IPAddrAnonymizationClass``. See also: ``anonymize_addr``. See Also: `base/init-bare.zeek <https://docs.zeek.org/en/stable/scripts/base/init-bare.zeek.html#type-IPAddrAnonymizationClass>`__ """ _ignore_ = 'IPAddrAnonymizationClass _' IPAddrAnonymizationClass = vars() IPAddrAnonymizationClass['ORIG_ADDR'] = enum.auto() IPAddrAnonymizationClass['RESP_ADDR'] = enum.auto() IPAddrAnonymizationClass['OTHER_ADDR'] = enum.auto()
[docs]@enum.unique class PcapFilterID(enum.IntFlag): """Enum: ``PcapFilterID``. Enum type identifying dynamic BPF filters. These are used by ``Pcap::precompile_pcap_filter`` and ``Pcap::precompile_pcap_filter``. See Also: `base/init-bare.zeek <https://docs.zeek.org/en/stable/scripts/base/init-bare.zeek.html#type-PcapFilterID>`__ """ _ignore_ = 'PcapFilterID _' PcapFilterID = vars() PcapFilterID['None'] = enum.auto() #: PacketFilter::DefaultPcapFilter #: (present if base/frameworks/packet-filter/main.zeek is loaded) PcapFilterID['PacketFilter__DefaultPcapFilter'] = enum.auto() #: PacketFilter::FilterTester #: (present if base/frameworks/packet-filter/main.zeek is loaded) PcapFilterID['PacketFilter__FilterTester'] = enum.auto()
[docs]@enum.unique class pkt_profile_modes(enum.IntFlag): """Enum: ``pkt_profile_modes``. Output modes for packet profiling information. See also: ``pkt_profile_mode``, ``pkt_profile_freq``, ``pkt_profile_file``. See Also: `base/init-bare.zeek <https://docs.zeek.org/en/stable/scripts/base/init-bare.zeek.html#type-pkt_profile_modes>`__ """ _ignore_ = 'pkt_profile_modes _' pkt_profile_modes = vars() #: No output. pkt_profile_modes['PKT_PROFILE_MODE_NONE'] = enum.auto() #: Output every pkt\_profile\_freq seconds. pkt_profile_modes['PKT_PROFILE_MODE_SECS'] = enum.auto() #: Output every pkt\_profile\_freq packets. pkt_profile_modes['PKT_PROFILE_MODE_PKTS'] = enum.auto() #: Output every pkt\_profile\_freq bytes. pkt_profile_modes['PKT_PROFILE_MODE_BYTES'] = enum.auto()
[docs]@enum.unique class transport_proto(enum.IntFlag): """Enum: ``transport_proto``. A connection’s transport-layer protocol. Note that Zeek uses the term “connection” broadly, using flow semantics for ICMP and UDP. See Also: `base/init-bare.zeek <https://docs.zeek.org/en/stable/scripts/base/init-bare.zeek.html#type-transport_proto>`__ """ _ignore_ = 'transport_proto _' transport_proto = vars() #: An unknown transport-layer protocol. transport_proto['unknown_transport'] = enum.auto() #: TCP. transport_proto['tcp'] = enum.auto() #: UDP. transport_proto['udp'] = enum.auto() #: ICMP. transport_proto['icmp'] = enum.auto()
[docs]@enum.unique class Direction(enum.IntFlag): """Enum: ``Direction``. See Also: `base/utils/directions-and-hosts.zeek <https://docs.zeek.org/en/stable/scripts/base/utils/directions-and-hosts.zeek.html#type-Direction>`__ """ _ignore_ = 'Direction _' Direction = vars() #: The connection originator is not within the locally-monitored #: network, but the other endpoint is. Direction['INBOUND'] = enum.auto() #: The connection originator is within the locally-monitored network, #: but the other endpoint is not. Direction['OUTBOUND'] = enum.auto() #: Only one endpoint is within the locally-monitored network, meaning #: the connection is either outbound or inbound. Direction['BIDIRECTIONAL'] = enum.auto() #: This value doesn’t match any connection. Direction['NO_DIRECTION'] = enum.auto()
[docs]@enum.unique class Host(enum.IntFlag): """Enum: ``Host``. See Also: `base/utils/directions-and-hosts.zeek <https://docs.zeek.org/en/stable/scripts/base/utils/directions-and-hosts.zeek.html#type-Host>`__ """ _ignore_ = 'Host _' Host = vars() #: A host within the locally-monitored network. Host['LOCAL_HOSTS'] = enum.auto() #: A host not within the locally-monitored network. Host['REMOTE_HOSTS'] = enum.auto() #: Any host. Host['ALL_HOSTS'] = enum.auto() #: This value doesn’t match any host. Host['NO_HOSTS'] = enum.auto()