Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-16 05:28:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Implement the zeek_init handler.

Browse source 
Implements the change and a test.
This commit is contained in:
Seth Hall 2019-04-12 22:29:40 +02:00
parent f96bc81f85
commit 8cefb9be42
118 changed files with 229 additions and 165 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/policy/protocols/ssh/detect-bruteforcing.bro
View file

@ -39,7 +39,7 @@ export {
const ignore_guessers: table[subnet] of subnet &redef;
}
event bro_init()
event zeek_init()
{
local r1: SumStats::Reducer = [$stream="ssh.login.failure", $apply=set(SumStats::SUM, SumStats::SAMPLE), $num_samples=5];
SumStats::create([$name="detect-ssh-bruteforcing",