Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-11 02:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Remove connection_successful and successful_connection_remove events

Browse source 
Related to https://github.com/zeek/zeek/issues/1119
This commit is contained in:
Jon Siwek 2020-09-10 12:06:50 -07:00
parent 2738b157ea
commit 5f435c2644
43 changed files with 364 additions and 533 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/base/protocols/socks/main.zeek
View file

@ -111,7 +111,7 @@ event socks_login_userpass_reply(c: connection, code: count) &priority=5
c$socks$status = v5_status[code];
}
event successful_connection_remove(c: connection)
event connection_state_remove(c: connection)
{
# This will handle the case where the analyzer failed in some way and was
# removed. We probably don't want to log these connections.