mirror of
https://github.com/zeek/zeek.git
synced 2025-10-04 07:38:19 +00:00
ded98cd373
This is based on commit 2731def9159247e6da8a3191783c89683363689c from the zeek-docs repo.
64 lines
2 KiB
ReStructuredText
64 lines
2 KiB
ReStructuredText
:tocdepth: 3
|
|
|
|
base/protocols/conn/inactivity.zeek
|
|
===================================
|
|
.. zeek:namespace:: Conn
|
|
|
|
Adjust the inactivity timeouts for interactive services which could
|
|
very possibly have long delays between packets.
|
|
|
|
:Namespace: Conn
|
|
|
|
Summary
|
|
~~~~~~~
|
|
Runtime Options
|
|
###############
|
|
===================================================================================== ==================================================================
|
|
:zeek:id:`Conn::analyzer_inactivity_timeouts`: :zeek:type:`table` :zeek:attr:`&redef` Define inactivity timeouts by the service detected being used over
|
|
the connection.
|
|
:zeek:id:`Conn::port_inactivity_timeouts`: :zeek:type:`table` :zeek:attr:`&redef` Define inactivity timeouts based on common protocol ports.
|
|
===================================================================================== ==================================================================
|
|
|
|
|
|
Detailed Interface
|
|
~~~~~~~~~~~~~~~~~~
|
|
Runtime Options
|
|
###############
|
|
.. zeek:id:: Conn::analyzer_inactivity_timeouts
|
|
:source-code: base/protocols/conn/inactivity.zeek 9 9
|
|
|
|
:Type: :zeek:type:`table` [:zeek:type:`AllAnalyzers::Tag`] of :zeek:type:`interval`
|
|
:Attributes: :zeek:attr:`&redef`
|
|
:Default:
|
|
|
|
::
|
|
|
|
{
|
|
[AllAnalyzers::ANALYZER_ANALYZER_FTP] = 1.0 hr,
|
|
[AllAnalyzers::ANALYZER_ANALYZER_SSH] = 1.0 hr
|
|
}
|
|
|
|
|
|
Define inactivity timeouts by the service detected being used over
|
|
the connection.
|
|
|
|
.. zeek:id:: Conn::port_inactivity_timeouts
|
|
:source-code: base/protocols/conn/inactivity.zeek 15 15
|
|
|
|
:Type: :zeek:type:`table` [:zeek:type:`port`] of :zeek:type:`interval`
|
|
:Attributes: :zeek:attr:`&redef`
|
|
:Default:
|
|
|
|
::
|
|
|
|
{
|
|
[513/tcp] = 1.0 hr,
|
|
[21/tcp] = 1.0 hr,
|
|
[23/tcp] = 1.0 hr,
|
|
[22/tcp] = 1.0 hr
|
|
}
|
|
|
|
|
|
Define inactivity timeouts based on common protocol ports.
|
|
|
|
|