Updates to the DPD framework.

- Removed the ProtocolViolation notice.  I'd like to hear
  if someone actually used that notice for something.
- Folded the dyn-disable functionality into the dpd/base script.
- Other small cleanup.
This commit is contained in:
Seth Hall 2011-06-30 21:26:30 -04:00
parent e3f6909b93
commit b4b990cfb5
5 changed files with 55 additions and 57 deletions

View file

@ -10,6 +10,8 @@ module DPD;
export {
redef record Info += {
## A chunk of the payload the most likely resulted in the protocol
## violation.
packet_segment: string &optional &log;
};
@ -21,5 +23,7 @@ export {
event protocol_violation(c: connection, atype: count, aid: count,
reason: string) &priority=4
{
if ( ! c?$dpd ) return;
c$dpd$packet_segment=fmt("%s", sub_bytes(get_current_packet()$data, 0, packet_segment_size));
}