Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

tunnels: Add 'X' to history when reaching Tunnel::max_depth

Browse source
This commit is contained in:
Arne Welzel 2023-11-30 18:49:59 +01:00
parent ad9446d799
commit 7325bc945f
10 changed files with 51 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
scripts/base/protocols/conn/main.zeek
View file

@ -125,6 +125,7 @@ export {
## i inconsistent packet (e.g. FIN+RST bits set)
## q multi-flag packet (SYN+FIN or SYN+RST bits set)
## ^ connection direction was flipped by Zeek's heuristic
## x connection analysis partial (e.g. limits exceeded)
## ====== ====================================================
##
## If the event comes from the originator, the letter is in