mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
17d0ade26a
By default this only logs all the violations, regardless of the confirmation state (for which there's still dpd.log). It includes packet, protocol and file analyzers. This uses options, change handlers and event groups for toggling the functionality at runtime. Closes #2031 |
||
|---|---|---|
| .. | ||
| __load__.zeek | ||
| dpd.zeek | ||
| logging.zeek | ||
| main.zeek | ||
| README | ||
The analyzer framework allows to dynamically enable or disable Zeek's protocol analyzers, as well as to manage the well-known ports which automatically activate a particular analyzer for new connections.