zeek/scripts/base/frameworks
Seth Hall 720089c03f Add a feature to better select the value threshold will apply to in the metrics framework.
- The feature was primarily added to allow the value to be
   modified for cluster based intermediate threshold checks
   without requiring the user to write the metrics filter
   differently for cluster consideration.  It's also a nice
   way to calculate some related information to the metric
   without accidently applying thresholds to that value.

 - Fixed a few small bugs in ftp detect-bruteforcing script
   and adapted it to the new threshold value selection feature.
2013-01-05 22:37:19 -05:00
..
cluster Rename the alarm summary mail variable 2012-10-30 16:31:18 -05:00
communication Merge remote-tracking branch 'vlad/info_record_fixes' 2012-07-13 16:20:49 -07:00
control Enable Bro to communicate with peers over non-global IPv6 addresses. 2012-05-17 12:59:20 -05:00
dpd Fixed some problems with the SOCKS analyzer and tests. 2012-06-20 22:57:46 -04:00
input Merge remote-tracking branch 'origin/topic/bernhard/input-end-of-data' 2012-10-12 09:48:58 -07:00
intel Fix some warnings from sphinx when building docs. 2012-11-15 16:40:18 -06:00
logging Renaming ASCII writer filter option 'only_single_header_row' to 'tsv'. 2012-12-03 14:40:38 -08:00
metrics Add a feature to better select the value threshold will apply to in the metrics framework. 2013-01-05 22:37:19 -05:00
notice Make const variables actually constant. Addresses #922. 2012-12-13 15:05:29 -06:00
packet-filter Checkpoint after pass. 2012-02-15 13:07:08 -08:00
reporter Merge remote-tracking branch 'origin/topic/seth/reporter-to-stderr' 2012-08-10 12:29:07 -07:00
signatures Add more signature framework documentation. 2011-12-14 12:50:54 -06:00
software One more very minor change I forgot to commit. 2012-02-03 16:27:51 -05:00
tunnels Add GPRS Tunnelling Protocol (GTPv1) decapsulation. 2012-10-19 14:02:35 -05:00