diff --git a/setup/so-functions b/setup/so-functions index dabd3af6a..7d1ccbf33 100755 --- a/setup/so-functions +++ b/setup/so-functions @@ -2980,13 +2980,21 @@ zeek_logs_enabled() { " - mysql"\ " - socks"\ " - x509"\ - " - dnp3_objects"\ - " - modbus_detailed"\ - " - modbus_mask_write_single_register"\ - " - modbus_read_write_multiple_registers"\ " - bacnet"\ " - bacnet_discovery"\ " - bacnet_property"\ + " - bsap_ip_header"\ + " - bsap_ip_rdb"\ + " - bsap_ip_unknown"\ + " - bsap_serial_header"\ + " - bsap_serial_rdb"\ + " - bsap_serial_rdb_ext"\ + " - bsap_serial_unknown"\ + " - cip"\ + " - cip_io"\ + " - cip_identity"\ + " - cotp"\ + " - dnp3_objects"\ " - ecat_registers"\ " - ecat_log_address"\ " - ecat_dev_info"\ @@ -2996,47 +3004,46 @@ zeek_logs_enabled() { " - ecat_soe_info"\ " - ecat_arp_info"\ " - enip"\ - " - cip"\ - " - cip_io"\ - " - cip_identity"\ - " - opcua_binary"\ - " - opcua_binary_status_code_detail"\ - " - opcua_binary_diag_info_detail"\ - " - opcua_binary_get_endpoints"\ - " - opcua_binary_get_endpoints_discovery"\ - " - opcua_binary_get_endpoints_user_token"\ - " - opcua_binary_get_endpoints_description"\ - " - opcua_binary_get_endpoints_locale_id"\ - " - opcua_binary_get_endpoints_profile_uri"\ - " - opcua_binary_create_session"\ - " - opcua_binary_create_session_user_token"\ - " - opcua_binary_create_session_endpoints"\ - " - opcua_binary_create_session_discovery"\ + " - modbus_detailed"\ + " - modbus_mask_write_single_register"\ + " - modbus_read_write_multiple_registers"\ + " - opcua_binary"\ " - opcua_binary_activate_session"\ " - opcua_binary_activate_session_client_software_cert"\ - " - opcua_binary_activate_session_locale_id"\ " - opcua_binary_activate_session_diagnostic_info"\ + " - opcua_binary_activate_session_locale_id"\ " - opcua_binary_browse"\ " - opcua_binary_browse_description"\ - " - opcua_binary_browse_request_continuation_point"\ - " - opcua_binary_browse_result"\ - " - opcua_binary_browse_response_references"\ " - opcua_binary_browse_diagnostic_info"\ + " - opcua_binary_browse_request_continuation_point"\ + " - opcua_binary_browse_response_references"\ + " - opcua_binary_browse_result"\ + " - opcua_binary_create_session"\ + " - opcua_binary_create_session_discovery"\ + " - opcua_binary_create_session_endpoints"\ + " - opcua_binary_create_session_user_token"\ " - opcua_binary_create_subscription"\ + " - opcua_binary_diag_info_detail"\ + " - opcua_binary_get_endpoints"\ + " - opcua_binary_get_endpoints_description"\ + " - opcua_binary_get_endpoints_discovery"\ + " - opcua_binary_get_endpoints_locale_id"\ + " - opcua_binary_get_endpoints_profile_uri"\ + " - opcua_binary_get_endpoints_user_token"\ " - opcua_binary_read"\ - " - cotp"\ + " - opcua_binary_status_code_detail"\ + " - profinet"\ + " - profinet_dce_rpc"\ + " - profinet_debug"\ " - s7comm"\ + " - s7comm_plus"\ " - s7comm_read_szl"\ " - s7comm_upload_download"\ - " - s7comm_plus"\ + " - stun"\ + " - stun_nat"\ " - tds"\ " - tds_rpc"\ " - tds_sql_batch"\ - " - profinet_dce_rpc"\ - " - profinet"\ - " - profinet_debug"\ - " - stun"\ - " - stun_nat"\ " - wireguard" >> "$zeeklogs_pillar" fi