zeek/testing/btest/Baseline/scripts.base.frameworks.netcontrol.catch-and-release-forgotten
Johanna Amann 4ad5d9073a NetControl: add catch and release event when IPs are forgotten.
This adds an event that is raised once Catch & Release ceases the
block management for an IP address because the IP has not been seen in
traffic during the watch interval.

This allows users who use their own logic on the top of catch and
release know when they will have to start re-blocking the IP if it
occurs in traffic again.
2016-07-28 16:28:07 -04:00
..
.stdout NetControl: add catch and release event when IPs are forgotten. 2016-07-28 16:28:07 -04:00
netcontrol_catch_release.log NetControl: add catch and release event when IPs are forgotten. 2016-07-28 16:28:07 -04:00