3 commits

Author	SHA1	Message	Date
Christian Kreibich	f8dbf70e3b	Tighten the scripts.base.frameworks.logging.hooks test ... This avoids interference from other log streams in the policy hook test cases, which could cause deviations in output vs baselines depending on build configuration.	2023-02-01 15:12:20 -08:00
Arne Welzel	9e7f2a04c1	frameworks/dpd: Move to frameworks/analyzer/dpd, load by default ... * Because frameworks/analyzer is loaded via init-frameworks-and-bifs the dpd functionality (really just dpd.log and disabling of analyzers) is now enabled even in bare mode. * Not sure we need to keep frameworks/base/dpd/__load__.zeek around or can just remove it right away.	2022-08-31 16:50:47 +02:00
Christian Kreibich	795a7ea98e	Add a global log policy hook to the logging framework ... This addresses the need for a central hook on any log write, which wasn't previously doable without a lot of effort. The log manager invokes the new Log::log_stream_policy hook prior to any filter-specific hooks. Like filter-level hooks, it may veto a log write. Even when it does, filter-level hooks still get invoked, but cannot "un-veto". Includes test cases.	2021-07-02 12:42:45 -07:00