From 077a5cbda8b97697f74d9ab02f2866e53a39c3b4 Mon Sep 17 00:00:00 2001 From: Johanna Amann Date: Fri, 19 Aug 2016 07:26:34 -0700 Subject: [PATCH] Remove old ack_above_hole event from scripts. Fixes BIT-1673 --- scripts/policy/protocols/conn/weirds.bro | 8 -------- 1 file changed, 8 deletions(-) diff --git a/scripts/policy/protocols/conn/weirds.bro b/scripts/policy/protocols/conn/weirds.bro index 8710635418..7f3c9431a4 100644 --- a/scripts/policy/protocols/conn/weirds.bro +++ b/scripts/policy/protocols/conn/weirds.bro @@ -12,8 +12,6 @@ export { redef enum Notice::Type += { ## Possible evasion; usually just chud. Retransmission_Inconsistency, - ## Could mean packet drop; could also be chud. - Ack_Above_Hole, ## Data has sequence hole; perhaps due to filtering. Content_Gap, }; @@ -28,12 +26,6 @@ event rexmit_inconsistency(c: connection, t1: string, t2: string, tcp_flags: str $identifier=fmt("%s", c$id)]); } -event ack_above_hole(c: connection) - { - NOTICE([$note=Ack_Above_Hole, $conn=c, - $msg=fmt("%s ack above a hole", id_string(c$id))]); - } - event content_gap(c: connection, is_orig: bool, seq: count, length: count) { NOTICE([$note=Content_Gap, $conn=c,