mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 07:08:19 +00:00
![]() With this commit, the data structure that is transfered for notice suppression is much smaller than before, not including potentially complex data structures like the fa_file record. |
||
---|---|---|
.. | ||
actions | ||
extend-email | ||
__load__.bro | ||
cluster.bro | ||
main.bro | ||
non-cluster.bro | ||
README | ||
weird.bro |
The notice framework enables Bro to "notice" things which are odd or potentially bad, leaving it to the local configuration to define which of them are actionable. This decoupling of detection and reporting allows Bro to be customized to the different needs that sites have.