Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-14 04:28:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Tiny scoping updates and test baseline updates for Intel framework.

Browse source
This commit is contained in:
Seth Hall 2016-08-05 09:29:23 -04:00
parent d6a7322a75
commit 4bb4c54f96
8 changed files with 70 additions and 69 deletions
Download patch file Download diff file Expand all files Collapse all files

5
scripts/base/frameworks/intel/main.bro
View file

@ -154,8 +154,9 @@ export {
global extend_match: hook(info: Info, s: Seen, items: set[Item]);
## The expiration timeout for intelligence items. Once an item expires, the
## :bro:id:`item_expired` hook is called. Reinsertion of an item resets the
## timeout. A negative value disables expiration of intelligence items.
## :bro:id:`Intel::item_expired` hook is called. Reinsertion of an item
## resets the timeout. A negative value disables expiration of intelligence
## items.
const item_expiration = -1 min &redef;
## This hook can be used to handle expiration of intelligence items.