statsd_test.bro

@load base/protocols/http
@load base/protocols/ssh

event connection_established(c: connection)
{
    statsd_increment("bro.connection.established", 1);
}

event connection_rejected(c: connection)
{
    statsd_increment("bro.connection.rejected", 1);
}

event HTTP::log_http(rec: HTTP::Info)
{
    local size = rec$response_body_len;

    statsd_increment("bro.http.requests", 1);
    statsd_increment("bro.http.bytes", size);

    local s = fmt("bro.http.status_code.%d", rec$status_code);
    statsd_increment(s, 1);
}

event SSH::log_ssh(rec: SSH::Info)
{
    local s = fmt("bro.ssh.login.%s", rec$auth_success);
    statsd_increment(s, 1);
}