mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
ded98cd373
This is based on commit 2731def9159247e6da8a3191783c89683363689c from the zeek-docs repo.
26 lines
702 B
Text
26 lines
702 B
Text
function our_drop_connection(c: conn_id, t: interval)
|
|
{
|
|
# As a first step, create the NetControl::Entity that we want to block
|
|
local e = NetControl::Entity($ty=NetControl::CONNECTION, $conn=c);
|
|
# Then, use the entity to create the rule to drop the entity in the forward path
|
|
local r = NetControl::Rule($ty=NetControl::DROP,
|
|
$target=NetControl::FORWARD, $entity=e, $expire=t);
|
|
|
|
# Add the rule
|
|
local id = NetControl::add_rule(r);
|
|
|
|
if ( id == "" )
|
|
print "Error while dropping";
|
|
}
|
|
|
|
event NetControl::init()
|
|
{
|
|
local debug_plugin = NetControl::create_debug(T);
|
|
NetControl::activate(debug_plugin, 0);
|
|
}
|
|
|
|
event connection_established(c: connection)
|
|
{
|
|
our_drop_connection(c$id, 20 secs);
|
|
}
|
|
|