{"commit":"7c13d10966d8f1aa3fde9fb9fe1ff04ddaeb3165","old_file":"rock.bro","new_file":"rock.bro","old_contents":"# Copyright (C) 2016, Missouri Cyber Team\n# All Rights Reserved\n# See the file \"LICENSE\" in the main distribution directory for details\n\nmodule ROCK;\n\nexport {\n  const sensor_id = \"sensor001-001\" &redef;\n}\n\n# Load integration with Snort on ROCK\n@load .\/frameworks\/files\/unified2-integration\n\n# Load integration with FSF\n@load .\/frameworks\/files\/extract2fsf\n\n# Load file extraction\n@load .\/frameworks\/files\/extraction\nredef FileExtract::prefix = \"\/data\/bro\/logs\/extract_files\/\";\nredef FileExtract::default_limit = 1048576000;\n\n# Add GeoIP info to conn log\n@load .\/misc\/conn-add-geoip\n\n# Add worker information to conn log\n@load .\/misc\/conn-add-worker\n\n","new_contents":"# Copyright (C) 2016, Missouri Cyber Team\n# All Rights Reserved\n# See the file \"LICENSE\" in the main distribution directory for details\n\nmodule ROCK;\n\nexport {\n  const sensor_id = \"sensor001-001\" &redef;\n}\n\n# Load integration with Snort on ROCK\n@load .\/frameworks\/files\/unified2-integration\n\n# Load integration with FSF\n@load .\/frameworks\/files\/extract2fsf\n\n# Load file extraction\n@load .\/frameworks\/files\/extraction\nredef FileExtract::prefix = \"\/data\/bro\/logs\/extract_files\/\";\nredef FileExtract::default_limit = 1048576000;\n\n# Configure Kafka output\n# Bro Kafka Output (plugin must be loaded!)\n@load Kafka\/KafkaWriter\/logs-to-kafka\nredef KafkaLogger::topic_name = \"bro_raw\";\nredef KafkaLogger::sensor_name = ROCK::sensor_id;\n\n# Add GeoIP info to conn log\n@load .\/misc\/conn-add-geoip\n\n# Add worker information to conn log\n@load .\/misc\/conn-add-worker\n\n","subject":"Revert \"Removes kafka from main config\"","message":"Revert \"Removes kafka from main config\"\n","lang":"Bro","license":"bsd-3-clause","repos":"mocyber\/rock-scripts"}
{"commit":"b2a547c6fb8a4f4351917512ebdb6e6170bc7a17","old_file":"frameworks\/files\/extraction\/plugins\/extract-archive.bro","new_file":"frameworks\/files\/extraction\/plugins\/extract-archive.bro","old_contents":"","new_contents":"@load ..\/__load__.bro\n\nmodule FileExtraction;\n\nconst archive_types: set[string] = { \"application\/x-rar-compressed\",\n\t\t\t\t\t\t\t\t\t\"application\/x-bzip2\",\n\t\t\t\t\t\t\t\t\t\"application\/gzip\",\n\t\t\t\t\t\t\t\t\t\"application\/x-lzma\",\n\t\t\t\t\t\t\t\t\t\"application\/x-lzip\",\n\t\t\t\t\t\t\t\t\t\"application\/x-xz\",\n\t\t\t\t\t\t\t\t\t\"application\/x-lzop\",\n\t\t\t\t\t\t\t\t\t\"application\/x-compress\",\n\t\t\t\t\t\t\t\t\t\"application\/x-7z-compressed\",\n\t\t\t\t\t\t\t\t\t\"application\/x-ace-compressed\",\n\t\t\t\t\t\t\t\t\t\"application\/vnd.ms-cab-compressed\",\n\t\t\t\t\t\t\t\t\t\"application\/x-gtar\",\n\t\t\t\t\t\t\t\t\t\"application\/zip\",\n\t\t\t\t\t\t\t\t  };\n\nhook FileExtraction::extract(f: fa_file, meta: fa_metadata) &priority=5\n\t{\n\tif ( meta$mime_type in archive_types )\n\t\tbreak;\n\t}\n","subject":"Add archive formats from upstream.","message":"Add archive formats from upstream.\n","lang":"Bro","license":"bsd-3-clause","repos":"mocyber\/rock-scripts"}
{"commit":"ac84b4c3d5d94563fe79fb43d4cfccc751912aa7","old_file":"scripts\/init.bro","new_file":"scripts\/init.bro","old_contents":"##! Packet source using Napatech\n\nmodule Napatech;\n\nexport {\n    ## The size of the software deduplication lru cache\n    const dedupe_lru_size = 1024 &redef;\n    ## Because applications can share streams, the Host Buffer Allowance\n    ## allows an application to consume a portion of the host buffer \n    ## before the application stops receiving traffic.\n    ## For Bro, you most likely want to set this to 100\n    const host_buffer_allowance = 100 &redef;\n}","new_contents":"##! Packet source using Napatech\n\nmodule Napatech;\n\nexport {\n    ## Should the plugin try to deduplicate packets with the color1\n    ## value of the DYN4 packet descriptor?\n    const enable_software_deduplication = T &redef;\n    ## The size of the software deduplication lru cache\n    const dedupe_lru_size = 1024 &redef;\n    ## Because applications can share streams, the Host Buffer Allowance\n    ## allows an application to consume a portion of the host buffer \n    ## before the application stops receiving traffic.\n    ## For Bro, you most likely want to set this to 100\n    const host_buffer_allowance = 100 &redef;\n}","subject":"Add default value for enable_software_deduplication","message":"Add default value for enable_software_deduplication\n","lang":"Bro","license":"bsd-3-clause","repos":"hosom\/bro-napatech,hosom\/bro-napatech"}