zeek/scripts/base
Jon Siwek 5f3af9e9eb Add new Tunnel::delay_teredo_confirmation option, default to true.
This option indicates that the Teredo analyzer should wait until
it sees both sides of a connection using a valid Teredo encapsulation
before issuing a protocol_confirmation.  Previous behavior confirmed
on the first instance of a valid encapsulation, which could result
in more false positives (and e.g. bogus entries in known-services.log).

Addresses #890.
2012-10-02 15:13:38 -05:00
..
frameworks Merge remote-tracking branch 'origin/topic/matthias/libcurl-fix' 2012-10-02 12:07:26 -07:00
misc Hopefully the last major script reorganization. 2011-08-05 23:09:53 -04:00
protocols Changing HTTP DPD port 3138 to 3128. 2012-07-20 09:57:38 -07:00
utils Add support to Bro for connecting with peers over IPv6. 2012-05-09 15:08:36 -05:00
init-bare.bro Add new Tunnel::delay_teredo_confirmation option, default to true. 2012-10-02 15:13:38 -05:00
init-default.bro Return of Robin's old SOCKS analyzer/decapsulator and tunnel code checkpoint. 2012-04-21 23:50:09 -04:00