zeek/scripts/policy/frameworks
Christian Kreibich 72acf24f52 Management framework: expand notify_agent_hello event arguments
This swaps the host event argument for the Broker ID. The latter is more useful,
since the sending agent doesn't necessarily know its IP address as visible to
the controller, and the controller can pull up the full Broker context via the
ID.

It also adds an explicit argument to the event to indicate whether the agent
connected to the controller or vice versa. This simplifies the controller's
internal logic.

Also minor tweaks to logging to show Broker IDs.
2022-06-03 02:12:19 -07:00
..
control Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
dpd Add analyzer_confirmation and analyzer_violation events 2021-11-23 19:36:50 -07:00
files update uses of "when" in base scripts to include captures 2022-01-07 14:53:33 -08:00
intel Fix host header normalization in intel framework. 2021-12-21 21:54:47 +01:00
management Management framework: expand notify_agent_hello event arguments 2022-06-03 02:12:19 -07:00
netcontrol Support for log filter policy hooks 2020-09-30 12:32:45 -07:00
notice update uses of "when" in base scripts to include captures 2022-01-07 14:53:33 -08:00
packet-filter More bro-to-zeek renaming in scripts and other files 2019-05-16 02:36:41 -05:00
signatures Hopefully the last major script reorganization. 2011-08-05 23:09:53 -04:00
software update uses of "when" in base scripts to include captures 2022-01-07 14:53:33 -08:00