more zeek cleanup

bin/sostat

@@ -234,7 +234,7 @@ if [ -d /nsm/sensor_data ] && [ $NUM_INTERFACES -gt 0 ]; then
 	echo "-------------------------------------------------------------------------"
 	echo
         TMP=`mktemp`
-        su sguil -c '/opt/zeek/bin/zeekctl netstats 2>&1 | grep -v "Warning: ZeekControl plugin uses legacy BroControl API. Use" | grep -v "'import ZeekControl.plugin' instead of 'import BroControl.plugin'" ' > $TMP
+        su sguil -c '/opt/zeek/bin/zeekctl netstats 2>&1 | grep -v "Warning: ZeekControl plugin uses legacy BroControl API. Use" | grep -v "import BroControl.plugin" | grep -v "^$" ' > $TMP
         if [ -s $TMP ]; then
                 echo "${underline}Zeek${normal}:"
                 echo

debian/changelog

@@ -1,3 +1,9 @@
+securityonion-sostat (20120722-0ubuntu0securityonion141) xenial; urgency=medium
+
+  * more zeek cleanup 
+
+ -- Doug Burks <[email protected]>  Thu, 26 Dec 2019 17:00:00 -0500
+
 securityonion-sostat (20120722-0ubuntu0securityonion140) xenial; urgency=medium
 
   * clean up zeek warnings 

debian/patches/more-zeek-cleanup

@@ -0,0 +1,36 @@
+Description: <short summary of the patch>
+ TODO: Put a short summary on the line above and replace this paragraph
+ with a longer explanation of this change. Complete the meta-information
+ with other relevant fields (see below for details). To make it easier, the
+ information below has been extracted from the changelog. Adjust it or drop
+ it.
+ .
+ securityonion-sostat (20120722-0ubuntu0securityonion141) xenial; urgency=medium
+ .
+   * more zeek cleanup
+Author: Doug Burks <[email protected]>
+
+---
+The information above should follow the Patch Tagging Guidelines, please
+checkout http://dep.debian.net/deps/dep3/ to learn about the format. Here
+are templates for supplementary fields that you might want to add:
+
+Origin: <vendor|upstream|other>, <url of original patch>
+Bug: <url in upstream bugtracker>
+Bug-Debian: https://bugs.debian.org/<bugnumber>
+Bug-Ubuntu: https://launchpad.net/bugs/<bugnumber>
+Forwarded: <no|not-needed|url proving that it has been forwarded>
+Reviewed-By: <name and email of someone who approved the patch>
+Last-Update: <YYYY-MM-DD>
+
+--- securityonion-sostat-20120722.orig/bin/sostat
++++ securityonion-sostat-20120722/bin/sostat
+@@ -234,7 +234,7 @@ if [ -d /nsm/sensor_data ] && [ $NUM_INT
+ 	echo "-------------------------------------------------------------------------"
+ 	echo
+         TMP=`mktemp`
+-        su sguil -c '/opt/zeek/bin/zeekctl netstats 2>&1 | grep -v "Warning: ZeekControl plugin uses legacy BroControl API. Use" | grep -v "'import ZeekControl.plugin' instead of 'import BroControl.plugin'" ' > $TMP
++        su sguil -c '/opt/zeek/bin/zeekctl netstats 2>&1 | grep -v "Warning: ZeekControl plugin uses legacy BroControl API. Use" | grep -v "import BroControl.plugin" | grep -v "^$" ' > $TMP
+         if [ -s $TMP ]; then
+                 echo "${underline}Zeek${normal}:"
+                 echo

debian/patches/series

@@ -132,3 +132,4 @@ securityonion-sostat:-improve-netsniff-packet-loss-calculation-Security-Onion-So
 securityonion-sostat:-migrate-from-Bro-to-Zeek-#1692
 update-copyright
 clean-up-zeek-warnings
+more-zeek-cleanup