zeek/testing/btest/scripts/base/protocols/dhcp
Peter Cullen fb4858d42b Prevent large dhcp log entries
A flood of DHCP traffic can result if very large log entries consisting
of many uids and/or msg_types. Such large log entries can disrupt a SIEM
ingestion pipeline. This change forcing a log entry to be written when
the number of uids or the number of msg_Types exceed a certain value.
The values are treated as options for easy configuration.
2022-07-28 11:34:18 -07:00
..
dhcp-ack-msg-types.zeek
dhcp-all-msg-types.zeek
dhcp-discover-msg-types.zeek
dhcp-prevent-large-msgtypes.zeek Prevent large dhcp log entries 2022-07-28 11:34:18 -07:00
dhcp-prevent-large-uids.zeek Prevent large dhcp log entries 2022-07-28 11:34:18 -07:00
dhcp-sub-opts.zeek
dhcp-time-nameserver-events.zeek
hw-type0.zeek
inform.test