zeek/scripts
Jon Siwek 53d9832d5a Fix a problem with non-manager cluster nodes applying Notice::policy.
This could, for example, result in duplicate emails being sent (one from
manager and one from worker) if Notice::emailed_types is redef'd in
local.bro (or any script that gets loaded on all cluster nodes).

The problem was that Notice::policy is used to populate the internal
Notice::ordered_policy vector in a priority 10 bro_init handler (in
scripts/base/frameworks/notice/main.bro) and then that is what is used
when applying policy to notices.  In order for
scripts/base/frameworks/notice/cluster.bro to prevent Notice::policy
from being used on non-manager nodes, it needs to clear it in a
bro_init hander of higher priority than 10.
2012-10-04 16:45:56 -05:00
..
base Fix a problem with non-manager cluster nodes applying Notice::policy. 2012-10-04 16:45:56 -05:00
policy Adding an identifier to the SMTP blocklist notices for duplicate suppression. 2012-08-23 13:55:04 -04:00
site Add @load-sigs directive for loading signature files (addresses #551). 2012-06-01 14:10:23 -05:00
CMakeLists.txt Don't install test-all-policy.bro script as it's for testing only. 2011-10-12 12:42:12 -05:00
test-all-policy.bro Merge remote-tracking branch 'origin/fastpath' 2012-07-27 12:55:10 -07:00