Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-05 16:18:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

A few more small fixes.

Browse source
This commit is contained in:
Seth Hall 2012-12-18 02:23:56 -05:00
parent f31de38c9b
commit ed36f37643
3 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/policy/misc/app-metrics.bro
View file

@ -16,7 +16,7 @@ export {
}; };
## The frequency of logging the stats collected by this script. ## The frequency of logging the stats collected by this script.
const break_interval = 1min &redef; const break_interval = 15mins &redef;
} }
function app_metrics_rollup(index: Metrics::Index, vals: table[string, string] of Metrics::ResultVal) function app_metrics_rollup(index: Metrics::Index, vals: table[string, string] of Metrics::ResultVal)

2
scripts/policy/misc/detect-traceroute/main.bro
View file

@ -34,7 +34,7 @@ export {
## Interval at which to watch for the ## Interval at which to watch for the
## :bro:id:`ICMPTimeExceeded::icmp_time_exceeded_threshold` variable to be crossed. ## :bro:id:`ICMPTimeExceeded::icmp_time_exceeded_threshold` variable to be crossed.
## At the end of each interval the counter is reset. ## At the end of each interval the counter is reset.
const icmp_time_exceeded_interval = 1min &redef; const icmp_time_exceeded_interval = 3min &redef;
## The log record for the traceroute log. ## The log record for the traceroute log.
type Info: record { type Info: record {

4
scripts/policy/protocols/http/detect-sqli.bro
View file

@ -74,7 +74,7 @@ event bro_init() &priority=3
$email_body_sections=vector(format_sqli_samples(val$samples)), $email_body_sections=vector(format_sqli_samples(val$samples)),
$src=index$host, $src=index$host,
$identifier=cat(index$host)]); $identifier=cat(index$host)]);
}, $log=F]); }]);
Metrics::add_filter("http.sqli.victim", Metrics::add_filter("http.sqli.victim",
[$every=sqli_requests_interval, [$every=sqli_requests_interval,
@ -87,7 +87,7 @@ event bro_init() &priority=3
$email_body_sections=vector(format_sqli_samples(val$samples)), $email_body_sections=vector(format_sqli_samples(val$samples)),
$src=index$host, $src=index$host,
$identifier=cat(index$host)]); $identifier=cat(index$host)]);
}, $log=F]); }]);
} }
event http_request(c: connection, method: string, original_URI: string, event http_request(c: connection, method: string, original_URI: string,