zeek/doc/scripts/policy/protocols/conn/disable-unknown-ip-proto-support.zeek.rst
Tim Wojtulewicz ded98cd373 Copy docs into Zeek repo directly
This is based on commit 2731def9159247e6da8a3191783c89683363689c from the
zeek-docs repo.
2025-09-26 02:58:29 +00:00

22 lines
647 B
ReStructuredText

:tocdepth: 3
policy/protocols/conn/disable-unknown-ip-proto-support.zeek
===========================================================
This script filters the ip_proto field out of the conn.log and disables
logging of connections with unknown IP protocols.
:Imports: :doc:`base/frameworks/analyzer/main.zeek </scripts/base/frameworks/analyzer/main.zeek>`, :doc:`base/protocols/conn </scripts/base/protocols/conn/index>`
Summary
~~~~~~~
Redefinitions
#############
============================================ =
:zeek:type:`Conn::Info`: :zeek:type:`record`
============================================ =
Detailed Interface
~~~~~~~~~~~~~~~~~~