mirror of
https://github.com/zeek/zeek.git
synced 2025-10-07 00:58:19 +00:00
9b12967d40
The previous behavior was to accomodate SYN/FIN/RST-filtered traces by not reporting missing data (via the content_gap event) for such connections. The new behavior always reports gaps for connections that are established and terminate normally, but sequence numbers indicate that all data packets of the connection were missed. The behavior can be reverted by redef'ing "detect_filtered_trace".
27 lines
980 B
Text
27 lines
980 B
Text
##! Declaration of various scripting-layer constants that the Bro core uses
|
|
##! internally. Documentation and default values for the scripting-layer
|
|
##! variables themselves are found in :doc:`/scripts/base/init-bare.bro`.
|
|
|
|
const ignore_keep_alive_rexmit: bool;
|
|
const skip_http_data: bool;
|
|
const use_conn_size_analyzer: bool;
|
|
const detect_filtered_trace: bool;
|
|
const report_gaps_for_partial: bool;
|
|
const exit_only_after_terminate: bool;
|
|
|
|
const NFS3::return_data: bool;
|
|
const NFS3::return_data_max: count;
|
|
const NFS3::return_data_first_only: bool;
|
|
|
|
const Tunnel::max_depth: count;
|
|
const Tunnel::enable_ip: bool;
|
|
const Tunnel::enable_ayiya: bool;
|
|
const Tunnel::enable_teredo: bool;
|
|
const Tunnel::enable_gtpv1: bool;
|
|
const Tunnel::enable_gre: bool;
|
|
const Tunnel::yielding_teredo_decapsulation: bool;
|
|
const Tunnel::delay_teredo_confirmation: bool;
|
|
const Tunnel::delay_gtp_confirmation: bool;
|
|
const Tunnel::ip_tunnel_timeout: interval;
|
|
|
|
const Threading::heartbeat_interval: interval;
|