zeek/scripts/base/protocols/conn
Robin Sommer 1e010fbb76 Merge remote-tracking branch 'origin/topic/johanna/conn-threshold'
* origin/topic/johanna/conn-threshold:
  Wrap threshold stuff up - fix two small bugs and update baselines.
  update GridFTP analyzer to use connection thresholding instead of polling
  Add high level api for thresholding that holds lists of thresholds and raises an event for each threshold exactly once.
  Allow setting packet and byte thresholds for connections.

BIT-1377 #merged
2015-04-17 13:02:31 -07:00
..
__load__.bro Add high level api for thresholding that holds lists of thresholds 2015-04-17 06:57:58 -07:00
contents.bro Fix typos and formatting in the conn protocol docs 2013-10-14 17:19:29 -05:00
inactivity.bro First prototype of new analyzer framework. 2013-03-26 11:05:38 -07:00
main.bro Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
polling.bro Fix typos and formatting in the conn protocol docs 2013-10-14 17:19:29 -05:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00
thresholds.bro Merge remote-tracking branch 'origin/topic/johanna/conn-threshold' 2015-04-17 13:02:31 -07:00

Support for connection (TCP, UDP, or ICMP) analysis.