mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
8 lines
235 B
Text
8 lines
235 B
Text
@load base/frameworks/intel
|
|
@load ./where-locations
|
|
|
|
event connection_established(c: connection)
|
|
{
|
|
Intel::seen([$host=c$id$orig_h, $conn=c, $where=Conn::IN_ORIG]);
|
|
Intel::seen([$host=c$id$resp_h, $conn=c, $where=Conn::IN_RESP]);
|
|
}
|