mirror of
https://github.com/zeek/zeek.git
synced 2025-10-09 18:18:19 +00:00
5f3af9e9eb
This option indicates that the Teredo analyzer should wait until it sees both sides of a connection using a valid Teredo encapsulation before issuing a protocol_confirmation. Previous behavior confirmed on the first instance of a valid encapsulation, which could result in more false positives (and e.g. bogus entries in known-services.log). Addresses #890.
22 lines
792 B
Text
22 lines
792 B
Text
##! Declaration of various scripting-layer constants that the Bro core uses
|
|
##! internally. Documentation and default values for the scripting-layer
|
|
##! variables themselves are found in :doc:`/scripts/base/init-bare`.
|
|
|
|
const ignore_keep_alive_rexmit: bool;
|
|
const skip_http_data: bool;
|
|
const use_conn_size_analyzer: bool;
|
|
const report_gaps_for_partial: bool;
|
|
|
|
const NFS3::return_data: bool;
|
|
const NFS3::return_data_max: count;
|
|
const NFS3::return_data_first_only: bool;
|
|
|
|
const Tunnel::max_depth: count;
|
|
const Tunnel::enable_ip: bool;
|
|
const Tunnel::enable_ayiya: bool;
|
|
const Tunnel::enable_teredo: bool;
|
|
const Tunnel::yielding_teredo_decapsulation: bool;
|
|
const Tunnel::delay_teredo_confirmation: bool;
|
|
const Tunnel::ip_tunnel_timeout: interval;
|
|
|
|
const Threading::heartbeat_interval: interval;
|