# This file was automatically generated by bifcl from event.bif.

global bro_init: event();
global bro_done: event();
global dns_mapping_valid: event(dm: dns_mapping);
global dns_mapping_unverified: event(dm: dns_mapping);
global dns_mapping_new_name: event(dm: dns_mapping);
global dns_mapping_lost_name: event(dm: dns_mapping);
global dns_mapping_name_changed: event(old_dm: dns_mapping, new_dm: dns_mapping);
global dns_mapping_altered: event(dm: dns_mapping, old_addrs: addr_set, new_addrs: addr_set);
global new_connection: event(c: connection);
global new_connection_contents: event(c: connection);
global connection_attempt: event(c: connection);
global connection_established: event(c: connection);
global partial_connection: event(c: connection);
global connection_partial_close: event(c: connection);
global connection_finished: event(c: connection);
global connection_half_finished: event(c: connection);
global connection_rejected: event(c: connection);
global connection_reset: event(c: connection);
global connection_pending: event(c: connection);
global connection_state_remove: event(c: connection);
global connection_SYN_packet: event(c: connection, pkt: SYN_packet);
global connection_timeout: event(c: connection);
global connection_reused: event(c: connection);
global connection_status_update: event(c: connection);
global packet_contents: event(c: connection, contents: string);
global udp_request: event(u: connection);
global udp_reply: event(u: connection);
global udp_session_done: event(u: connection);
global icmp_sent: event(icmp: icmp_conn);
global icmp_echo_request: event(icmp: icmp_conn, id: count, seq: count, payload: string);
global icmp_echo_reply: event(icmp: icmp_conn, id: count, seq: count, payload: string);
global icmp_unreachable: event(icmp: icmp_conn, code: count, context: icmp_context);
global net_stats_update: event(t: time, ns: net_stats);
global conn_stats: event(c: connection, os: endpoint_stats, rs: endpoint_stats);
global conn_weird: event(name: string, c: connection);
global conn_weird_addl: event(name: string, c: connection, addl: string);
global flow_weird: event(name: string, src: addr, dst: addr);
global net_weird: event(name: string);
global rexmit_inconsistency: event(c: connection, t1: string, t2: string);
global ack_above_hole: event(c: connection);
global content_gap: event(c: connection, is_orig: bool, seq: count, length: count);
global inconsistent_option: event(c: connection);
global bad_option: event(c: connection);
global bad_option_termination: event(c: connection);
global finger_request: event(c: connection, full: bool, username: string, hostname: string);
global finger_reply: event(c: connection, reply_line: string);
global ident_request: event(c: connection, lport: port, rport: port);
global ident_reply: event(c: connection, lport: port, rport: port, user_id: string, system: string);
global ident_error: event(c: connection, lport: port, rport: port, line: string);
global login_failure: event(c: connection, user: string, client_user: string, password: string, line: string);
global login_success: event(c: connection, user: string, client_user: string, password: string, line: string);
global login_input_line: event(c: connection, line: string);
global login_output_line: event(c: connection, line: string);
global login_confused: event(c: connection, msg: string, line: string);
global login_confused_text: event(c: connection, line: string);
global login_terminal: event(c: connection, terminal: string);
global login_display: event(c: connection, display: string);
global login_prompt: event(c: connection, prompt: string);
global excessive_line: event(c: connection);
global authentication_accepted: event(name: string, c: connection);
global authentication_rejected: event(name: string, c: connection);
global authentication_skipped: event(c: connection);
global activating_encryption: event(c: connection);
global ftp_request: event(c: connection, command: string, arg: string);
global ftp_reply: event(c: connection, code: count, msg: string, cont_resp: bool);
global smtp_request: event(c: connection, is_orig: bool, command: string, arg: string);
global smtp_reply: event(c: connection, is_orig: bool, code: count, cmd: string, msg: string, cont_resp: bool);
global smtp_data: event(c: connection, is_orig: bool, data: string);
global smtp_unexpected: event(c: connection, is_orig: bool, msg: string, detail: string);
global mime_begin_entity: event(c: connection);
global mime_next_entity: event(c: connection);
global mime_end_entity: event(c: connection);
global mime_one_header: event(c: connection, h: mime_header_rec);
global mime_all_headers: event(c: connection, hlist: mime_header_list);
global mime_segment_data: event(c: connection, length: count, data: string);
global mime_entity_data: event(c: connection, length: count, data: string);
global mime_all_data: event(c: connection, length: count, data: string);
global mime_event: event(c: connection, event_type: string, detail: string);
global mime_content_hash: event(c: connection, hash_value: string);
global pm_request_null: event(r: connection);
global pm_request_set: event(r: connection, m: pm_mapping, success: bool);
global pm_request_unset: event(r: connection, m: pm_mapping, success: bool);
global pm_request_getport: event(r: connection, pr: pm_port_request, p: port);
global pm_request_dump: event(r: connection, m: pm_mappings);
global pm_request_callit: event(r: connection, call: pm_callit_request, p: port);
global pm_attempt_null: event(r: connection, status: count);
global pm_attempt_set: event(r: connection, status: count, m: pm_mapping);
global pm_attempt_unset: event(r: connection, status: count, m: pm_mapping);
global pm_attempt_getport: event(r: connection, status: count, pr: pm_port_request);
global pm_attempt_dump: event(r: connection, status: count);
global pm_attempt_callit: event(r: connection, status: count, call: pm_callit_request);
global pm_bad_port: event(r: connection, bad_p: count);
global ntp_message: event(u: connection, msg: ntp_msg, excess: string);
global netbios_session_request: event(c: connection, msg: string);
global netbios_session_accepted: event(c: connection, msg: string);
global netbios_session_rejected: event(c: connection, msg: string);
global netbios_session_message: event(c: connection, msg: string);
global netbios_session_ret_arg_resp: event(c: connection, msg: string);
global netbios_session_keepalive: event(c: connection, msg: string);
global dns_request: event(c: connection, msg: dns_msg, query: string, qtype: count, qclass: count);
global dns_full_request: event();
global dns_rejected: event(c: connection, msg: dns_msg, query: string, qtype: count, qclass: count);
global dns_A_reply: event(c: connection, msg: dns_msg, ans: dns_answer, a: addr);
global dns_NS_reply: event(c: connection, msg: dns_msg, ans: dns_answer, name: string);
global dns_CNAME_reply: event(c: connection, msg: dns_msg, ans: dns_answer, name: string);
global dns_PTR_reply: event(c: connection, msg: dns_msg, ans: dns_answer, name: string);
global dns_SOA_reply: event(c: connection, msg: dns_msg, ans: dns_answer, soa: dns_soa);
global dns_WKS_reply: event(c: connection, msg: dns_msg, ans: dns_answer);
global dns_HINFO_reply: event(c: connection, msg: dns_msg, ans: dns_answer);
global dns_MX_reply: event(c: connection, msg: dns_msg, ans: dns_answer, name: string, preference: count);
global dns_TXT_reply: event(c: connection, msg: dns_msg, ans: dns_answer);
global dns_SRV_reply: event(c: connection, msg: dns_msg, ans: dns_answer);
global dns_EDNS0: event(c: connection, msg: dns_msg, ans: dns_answer);
global http_request: event(c: connection, method: string, original_URI: string, unescaped_URI: string, version: string);
global http_reply: event(c: connection, version: string, code: count, reason: string);
global http_header: event(c: connection, is_orig: bool, name: string, value: string);
global http_all_headers: event(c: connection, is_orig: bool, hlist: mime_header_list);
global http_begin_entity: event(c: connection, is_orig: bool);
global http_end_entity: event(c: connection, is_orig: bool);
global http_content_type: event(c: connection, is_orig: bool, ty: string, subty: string);
global http_entity_data: event(c: connection, is_orig: bool, length: count, data: string);
global http_message_done: event(c: connection, is_orig: bool, stat: http_message_stat);
global http_event: event(c: connection, event_type: string, detail: string);
global http_stats: event(c: connection, stats: http_stats_rec);
global ssh_client_version: event(c: connection, version: string);
global ssh_server_version: event(c: connection, version: string);
global stp_create_endp: event(c: connection, e: int, is_orig: bool);
global stp_resume_endp: event(e: int);
global stp_correlate_pair: event(e1: int, e2: int);
global stp_remove_pair: event(e1: int, e2: int);
global stp_remove_endp: event(e: int);
global interconn_stats: event(c: connection, os: interconn_endp_stats, rs: interconn_endp_stats);
global interconn_remove_conn: event(c: connection);
global backdoor_stats: event(c: connection, os: backdoor_endp_stats, rs: backdoor_endp_stats);
global backdoor_remove_conn: event(c: connection);
global ssh_signature_found: event(c: connection, is_orig: bool);
global telnet_signature_found: event(c: connection, is_orig: bool, len: count);
global rlogin_signature_found: event(c: connection, is_orig: bool, num_null: count, len: count);
global root_backdoor_signature_found: event(c: connection);
global ftp_signature_found: event(c: connection);
global napster_signature_found: event(c: connection);
global gnutella_signature_found: event(c: connection);
global kazaa_signature_found: event(c: connection);
global http_signature_found: event(c: connection);
global http_proxy_signature_found: event(c: connection);
global signature_match: event(state: signature_state, msg: string, data: string);
global software_version_found: event(host: addr, s: software, raw: string);
global software_parse_error: event(host: addr, s: string);
global anonymization_mapping: event(orig: addr, mapped: addr);
