Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add NEWS entry and zeekygen-smithing for disabling_analyzer()

Browse source
This commit is contained in:
Arne Welzel 2022-08-11 13:32:19 +02:00
parent abb7f9a509
commit 6e54d6c095
2 changed files with 13 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
scripts/base/init-bare.zeek
View file

@ -585,8 +585,9 @@ type fa_metadata: record {
};
## A hook taking a connection, analyzer tag and analyzer id that can be
## used to veto disabling analyzers. This hook is invoked synchronously
## during a :zeek:see:`disable_analyzer` call.
## used to veto disabling analyzers. Specifically, an analyzer can be prevented
## from being disabled by using a :zeek:see:`break` statement within the hook.
## This hook is invoked synchronously during a :zeek:see:`disable_analyzer` call.
##
## Scripts implementing this hook should have other logic that will eventually
## disable the analyzer for the given connection. That is, if a script vetoes