mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
26 lines
957 B
Text
26 lines
957 B
Text
# $Id: heavy-analysis.bro 2771 2006-04-18 23:53:09Z vern $
|
|
#
|
|
# Loading this files enables somewhat more accurate, yet also significantly
|
|
# more expensive, analysis (in terms of memory as well as CPU time).
|
|
#
|
|
# This script only sets core-level options. Script-level timeouts are
|
|
# adjusted in heavy.*.bro, loaded via Bro's prefix mechanism. To make this
|
|
# work, the prefix has to be set *before* reading other scripts, either by
|
|
# loading this script first of all, or by manually putting a @prefix
|
|
# at the start of Bro's configuration.
|
|
|
|
@prefixes += heavy
|
|
|
|
redef tcp_SYN_timeout = 120 secs;
|
|
redef tcp_session_timer = 30 secs;
|
|
redef tcp_connection_linger = 30 secs;
|
|
redef tcp_attempt_delay = 300 secs;
|
|
redef tcp_close_delay = 15 secs;
|
|
redef tcp_reset_delay = 15 secs;
|
|
redef tcp_partial_close_delay = 10 secs;
|
|
|
|
redef max_timer_expires = 32;
|
|
|
|
redef tcp_inactivity_timeout = 2 hrs;
|
|
redef udp_inactivity_timeout = 1 hrs;
|
|
redef icmp_inactivity_timeout = 1 hrs;
|