zeek/aux/broctl/policy/cluster-manager.drop.bro
Robin Sommer 2b6ad76bd5 Creating a branch release/1.5 with the current 1.5.3 release code.
This is so that people working from the current stable version can
still start using git.
2011-03-09 15:26:01 -08:00

23 lines
413 B
Text

# $Id$
# These will be generated by the workers.
event Drop::address_seen_again(a: addr)
{
debug_log(fmt("received seen_again for %s", a));
if ( ! use_catch_release )
return;
if ( a !in drop_info )
# Never dropped.
return;
local di = drop_info[a];
if ( is_dropped(a) )
# Still dropped.
return;
NOTICE([$note=AddressSeenAgain, $src=a,
$msg=fmt("%s seen again after release", a)]);
}