zeek/scripts/base/frameworks/notice
Seth Hall 4942767c4d More default "weird" tuning for the "SYN_with_data" notice.
- I think the default tuning should be that anything not requiring
  a session to be established should use ACTION_LOG_PER_ORIG.

- We need to get some tie-in with the metrics framework in place
  so that we can find when lots of these values are being suppressed.
2011-11-14 16:12:38 -05:00
..
actions Tuning the format of the pretty-printed alarm summaries. 2011-10-26 21:12:16 -07:00
extend-email Attempt to make hostname notice email extension work and small format adjustments. 2011-10-21 22:51:56 -04:00
__load__.bro Now actually pretty-printing the notices. 2011-10-26 13:42:42 -07:00
cluster.bro Fixed the "identifier is not exported" error. 2011-10-07 02:51:40 -04:00
main.bro Adding sub messages to emails. 2011-10-25 11:36:24 -04:00
weird.bro More default "weird" tuning for the "SYN_with_data" notice. 2011-11-14 16:12:38 -05:00