mirror of
https://github.com/zeek/zeek.git
synced 2025-10-05 08:08:19 +00:00
![]() It had some conceptual problems because notices aren't always logged and in some cases are fairly infrequently logged which resulted in a lot of notice tags being attached to connections where the notice didn't show up in a log file. Also, the rule of thumb here is that frameworks should never load protocols. It's just bad practice and probably indicates incorrect design somewhere. The link between the conn log and the notice log should now be made with the connections unique ID which is logged in both logs and is more reliable. |
||
---|---|---|
.. | ||
__load__.bro | ||
action-filters.bro | ||
base.bro | ||
weird.bro |