Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-06 16:48:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge branch 'topic/jazoff/catch-and-release-perf' of https://github.com/JustinAzoff/zeek

Browse source 
* 'topic/jazoff/catch-and-release-perf' of https://github.com/JustinAzoff/zeek:
  improve performance of catch and release script
This commit is contained in:
Johanna Amann 2019-01-10 08:38:17 -08:00
commit 1cee5d0f9d
1 changed files with 1 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
scripts/base/frameworks/netcontrol/catch-and-release.bro
View file

@ -428,13 +428,12 @@ function unblock_address_catch_release(a: addr, reason: string &default=""): boo
function catch_release_seen(a: addr)
{
local e = Entity($ty=ADDRESS, $ip=addr_to_subnet(a));
if ( a in blocks )
{
@if ( ! Cluster::is_enabled() || ( Cluster::is_enabled() && Cluster::local_node_type() == Cluster::MANAGER ) )
local bi = blocks[a];
local log: CatchReleaseInfo;
local e = Entity($ty=ADDRESS, $ip=addr_to_subnet(a));
if ( [e,DROP] in rule_entities )
{