mirror of
https://github.com/zeek/zeek.git
synced 2025-10-12 19:48:20 +00:00
weird.bro moved into notice framework.
- That might not be the right place to put it though.
This commit is contained in:
parent
e19e050121
commit
09e242f98f
5 changed files with 6 additions and 7 deletions
|
@ -11,12 +11,11 @@
|
||||||
#@load ssl
|
#@load ssl
|
||||||
@load syslog
|
@load syslog
|
||||||
|
|
||||||
@load communication
|
#@load communication
|
||||||
@load metrics
|
@load metrics
|
||||||
@load notice
|
@load notice
|
||||||
@load signatures
|
@load signatures
|
||||||
@load software
|
@load software
|
||||||
@load weird
|
|
||||||
|
|
||||||
@load detectors/http-MHR
|
@load detectors/http-MHR
|
||||||
|
|
||||||
|
|
|
@ -1416,7 +1416,7 @@ function prefixed_id(id: count): string
|
||||||
# ANALYZER_<analyzer-name>*, e.g., ANALYZER_HTTP.
|
# ANALYZER_<analyzer-name>*, e.g., ANALYZER_HTTP.
|
||||||
type AnalyzerTag: count;
|
type AnalyzerTag: count;
|
||||||
|
|
||||||
# DPM configuration.
|
# DPD configuration.
|
||||||
|
|
||||||
type dpd_protocol_config: record {
|
type dpd_protocol_config: record {
|
||||||
ports: set[port] &optional;
|
ports: set[port] &optional;
|
||||||
|
@ -1489,4 +1489,3 @@ const parse_udp_tunnels = F &redef;
|
||||||
|
|
||||||
#@load site
|
#@load site
|
||||||
#@load dpd
|
#@load dpd
|
||||||
@load weird
|
|
|
@ -1,2 +1,3 @@
|
||||||
@load notice/base
|
@load frameworks/notice/base
|
||||||
|
@load frameworks/notice/weird
|
||||||
#@load notice/action-filters
|
#@load notice/action-filters
|
|
@ -1,4 +1,4 @@
|
||||||
@load notice
|
@load frameworks/notice/base
|
||||||
@load utils/conn_ids
|
@load utils/conn_ids
|
||||||
|
|
||||||
module Weird;
|
module Weird;
|
|
@ -4,7 +4,7 @@
|
||||||
@load notice
|
@load notice
|
||||||
|
|
||||||
# Load the policy scripts where the notices are defined.
|
# Load the policy scripts where the notices are defined.
|
||||||
@load weird
|
@load frameworks/notice/weird
|
||||||
@load dpd
|
@load dpd
|
||||||
|
|
||||||
# Remove these notices from logging since they can be too noisy.
|
# Remove these notices from logging since they can be too noisy.
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue