mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
2b6ad76bd5
This is so that people working from the current stable version can still start using git.
40 lines
877 B
Text
40 lines
877 B
Text
# $Id$
|
|
|
|
# The cluster manager will inform us with these events if he's interested in
|
|
# further connection attempts from that source.
|
|
|
|
global watch_addr_table: set[addr] &read_expire=7days &persistent;
|
|
|
|
global address_seen_again: event(a: addr);
|
|
|
|
event Drop::address_restored(a: addr)
|
|
{
|
|
debug_log(fmt("received restored for %s", a));
|
|
add watch_addr_table[a];
|
|
}
|
|
|
|
event Drop::address_dropped(a: addr)
|
|
{
|
|
debug_log(fmt("received dropped for %s", a));
|
|
delete watch_addr_table[a];
|
|
}
|
|
|
|
event Drop::address_cleared(a: addr)
|
|
{
|
|
debug_log(fmt("received cleared for %s", a));
|
|
delete watch_addr_table[a];
|
|
}
|
|
|
|
# We need to forward the new connection attempt.
|
|
event new_connection(c: connection)
|
|
{
|
|
local a = c$id$orig_h;
|
|
if ( a in watch_addr_table )
|
|
{
|
|
debug_log(fmt("sending seen_again for %s", a));
|
|
event Drop::address_seen_again(a);
|
|
delete watch_addr_table[a];
|
|
}
|
|
}
|
|
|
|
|