mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
e6ed61c47a
This switches the DPD logic to always log analyzers that raised a protocol confirmation. The logic is that, once a protocol has been confirmed - and thus there probably is log output - it does not make sense to later remove it from the log. It does make sense to somehow flag it as failed - but that seems like a secondary step. |
||
|---|---|---|
| .. | ||
| conn-first.log | ||
| conn-second.log | ||
| coverage | ||
| output | ||
| weird-combined.log | ||