Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Deprecate misc/scan.zeek

Browse source 
Update bare-mode-errors test to ignore that specific message.
This commit is contained in:
Arne Welzel 2022-08-19 13:13:08 +02:00
parent f5df2a132a
commit 6dc585bd8c
4 changed files with 10 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/policy/misc/scan.zeek
View file

@ -4,6 +4,8 @@
# Seth Hall
# All the authors of the old scan.bro
@deprecated "Remove in v6.1. Use the external github.com/ncsa/bro-simple-scan package instead (e.g., by installing it via `zkg install ncsa/bro-simple-scan`). The misc/scan.zeek script hasn't been maintained since 2013. Further, the external bro-simple-scan package from NCSA (Justin Azoff) has become the recommended alternative for TCP scan detection."
@load base/frameworks/notice
@load base/frameworks/sumstats

7
scripts/site/local.zeek
View file

@ -18,9 +18,10 @@ redef digest_salt = "Please change this value.";
# Enable logging of memory, packet and lag statistics.
@load misc/stats
# Load the scan detection script. It's disabled by default because
# it often causes performance issues.
#@load misc/scan
# For TCP scan detection, we recommend installing the package from
# 'https://github.com/ncsa/bro-simple-scan'. E.g., by installing it via
#
# zkg install ncsa/bro-simple-scan
# Detect traceroute being run on the network. This could possibly cause
# performance trouble when there are a lot of traceroutes on your network.