zeek/scripts/base
Jon Siwek 53d9832d5a Fix a problem with non-manager cluster nodes applying Notice::policy.
This could, for example, result in duplicate emails being sent (one from
manager and one from worker) if Notice::emailed_types is redef'd in
local.bro (or any script that gets loaded on all cluster nodes).

The problem was that Notice::policy is used to populate the internal
Notice::ordered_policy vector in a priority 10 bro_init handler (in
scripts/base/frameworks/notice/main.bro) and then that is what is used
when applying policy to notices.  In order for
scripts/base/frameworks/notice/cluster.bro to prevent Notice::policy
from being used on non-manager nodes, it needs to clear it in a
bro_init hander of higher priority than 10.
2012-10-04 16:45:56 -05:00
..
frameworks Fix a problem with non-manager cluster nodes applying Notice::policy. 2012-10-04 16:45:56 -05:00
misc Hopefully the last major script reorganization. 2011-08-05 23:09:53 -04:00
protocols Changing HTTP DPD port 3138 to 3128. 2012-07-20 09:57:38 -07:00
utils Add support to Bro for connecting with peers over IPv6. 2012-05-09 15:08:36 -05:00
init-bare.bro Add new Tunnel::delay_teredo_confirmation option, default to true. 2012-10-02 15:13:38 -05:00
init-default.bro Return of Robin's old SOCKS analyzer/decapsulator and tunnel code checkpoint. 2012-04-21 23:50:09 -04:00