zeek/scripts/base/frameworks/notice
Jon Siwek 53d9832d5a Fix a problem with non-manager cluster nodes applying Notice::policy.
This could, for example, result in duplicate emails being sent (one from
manager and one from worker) if Notice::emailed_types is redef'd in
local.bro (or any script that gets loaded on all cluster nodes).

The problem was that Notice::policy is used to populate the internal
Notice::ordered_policy vector in a priority 10 bro_init handler (in
scripts/base/frameworks/notice/main.bro) and then that is what is used
when applying policy to notices.  In order for
scripts/base/frameworks/notice/cluster.bro to prevent Notice::policy
from being used on non-manager nodes, it needs to clear it in a
bro_init hander of higher priority than 10.
2012-10-04 16:45:56 -05:00
..
actions Merge remote-tracking branch 'origin/master' into topic/script-reference 2012-01-06 12:11:49 -08:00
extend-email Minor notice documentation tweaks. 2011-12-19 16:28:30 -06:00
__load__.bro Now actually pretty-printing the notices. 2011-10-26 13:42:42 -07:00
cluster.bro Fix a problem with non-manager cluster nodes applying Notice::policy. 2012-10-04 16:45:56 -05:00
main.bro Fixing some doc warnings. 2012-01-10 01:30:55 -05:00
weird.bro Add more notice framework documentation. 2011-12-14 10:05:52 -06:00