mirror of
https://github.com/zeek/zeek.git
synced 2025-10-04 23:58:20 +00:00
Remove the default "tcp or udp or icmp" filter.
In default mode, Bro would load the packet filter script framework which installs a filter that allows all packets, but in bare mode (the -b option), this old filter would not follow IPv6 protocol chains and thus filter out packets with extension headers.
This commit is contained in:
parent
e74cbbf774
commit
7af14ec1fe
1 changed files with 1 additions and 1 deletions
|
@ -837,7 +837,7 @@ int main(int argc, char** argv)
|
||||||
|
|
||||||
if ( dns_type != DNS_PRIME )
|
if ( dns_type != DNS_PRIME )
|
||||||
net_init(interfaces, read_files, netflows, flow_files,
|
net_init(interfaces, read_files, netflows, flow_files,
|
||||||
writefile, "tcp or udp or icmp",
|
writefile, "",
|
||||||
secondary_path->Filter(), do_watchdog);
|
secondary_path->Filter(), do_watchdog);
|
||||||
|
|
||||||
BroFile::SetDefaultRotation(log_rotate_interval, log_max_size);
|
BroFile::SetDefaultRotation(log_rotate_interval, log_max_size);
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue