Typing Annotations

Zeek Data Types

zlogging.typing.zeek_addr = ~addr

Zeek addr data type.

Type

type

zlogging.typing.zeek_bool = ~bool

Zeek bool data type.

Type

type

zlogging.typing.zeek_count = ~count

Zeek count data type.

Type

type

zlogging.typing.zeek_double = ~double

Zeek double data type.

Type

type

zlogging.typing.zeek_enum = ~enum

Zeek enum data type.

Type

type

zlogging.typing.zeek_interval = ~interval

Zeek interval data type.

Type

type

zlogging.typing.zeek_int = ~int

Zeek int data type.

Type

type

zlogging.typing.zeek_port = ~port

Zeek port data type.

Type

type

zlogging.typing.zeek_record = ~record

Zeek record data type.

Note

As a variadic data type, it supports the typing proxy as TypedDict, introduced in PEP 589:

class MyLog(zeek_record):
    field_one: zeek_int
    field_two: zeek_set[zeek_port]

which is the same at runtime as following:

RecordType(field_one=IntType,
           field_two=SetType(element_type=PortType))

See also

See expand_typing() for more information about the processing of typing proxy.

zlogging.typing.zeek_set = ~set

Zeek set data type.

Note

As a generic data type, the class supports the typing proxy as introduced PEP 484:

class MyLog(zeek_record):
    field_one: zeek_set[zeek_str]

which is the same at runtime as following:

class MyLog(zeek_record):
    field_one = SetType(element_type=StringType())

zlogging.typing.zeek_string = ~string

Zeek string data type.

Type

type

zlogging.typing.zeek_subnet = ~subnet

Zeek subnet data type.

Type

type

zlogging.typing.zeek_time = ~time

Zeek time data type.

Type

type

zlogging.typing.zeek_vector = ~vector

Zeek vector data type.

Note

As a generic data type, the class supports the typing proxy as introduced PEP 484:

class MyLog(zeek_record):
    field_one: zeek_vector[zeek_str]

which is the same at runtime as following:

class MyLog(zeek_record):
    field_one = VectorType(element_type=StringType())

Bro Data Types

Use of bro is deprecated. Please use zeek instead.

zlogging.typing.bro_addr = ~bro_addr

Bro addr data type.

Type

type

zlogging.typing.bro_bool = ~bro_bool

Bro bool data type.

Type

type

zlogging.typing.bro_count = ~bro_count

Bro count data type.

Type

type

zlogging.typing.bro_double = ~bro_double

Bro double data type.

Type

type

zlogging.typing.bro_enum = ~bro_enum

Bro enum data type.

Type

type

zlogging.typing.bro_interval = ~bro_interval

Bro interval data type.

Type

type

zlogging.typing.bro_int = ~bro_int

Bro int data type.

Type

type

zlogging.typing.bro_port = ~bro_port

Bro port data type.

Type

type

zlogging.typing.bro_record = ~bro_record

Bro record data type.

See also

See zeek_record for more information.

zlogging.typing.bro_set = ~bro_set

Bro set data type.

See also

See zeek_set for more information.

zlogging.typing.bro_string = ~bro_string

Bro string data type.

Type

type

zlogging.typing.bro_subnet = ~bro_subnet

Bro subnet data type.

Type

type

zlogging.typing.bro_time = ~bro_time

Bro time data type.

Type

type

zlogging.typing.bro_vector = ~bro_vector

Bro vector data type.

See also

See zeek_vector for more information.