mirror of
https://github.com/zeek/zeek.git
synced 2025-10-04 23:58:20 +00:00
4ad5d9073a
This adds an event that is raised once Catch & Release ceases the block management for an IP address because the IP has not been seen in traffic during the watch interval. This allows users who use their own logic on the top of catch and release know when they will have to start re-blocking the IP if it occurs in traffic again. |
||
|---|---|---|
| .. | ||
| base | ||
| policy | ||
| site | ||
| check-test-all-policy.bro | ||