zeek/policy/frameworks/notice
Seth Hall 02b94f7141 Removed the notice_tag injection from the conn log.
It had some conceptual problems because notices aren't
always logged and in some cases are fairly infrequently
logged which resulted in a lot of notice tags being
attached to connections where the notice didn't show
up in a log file.  Also, the rule of thumb here is that
frameworks should never load protocols.  It's just bad
practice and probably indicates incorrect design somewhere.

The link between the conn log and the notice log should
now be made with the connections unique ID which is logged
in both logs and is more reliable.
2011-07-06 10:23:30 -04:00
..
__load__.bro weird.bro moved into notice framework. 2011-06-24 16:40:05 -04:00
action-filters.bro Notices actions are now accumulative. 2011-06-24 13:35:48 -04:00
base.bro Removed the notice_tag injection from the conn log. 2011-07-06 10:23:30 -04:00
weird.bro Merge remote branch 'origin/topic/robin/reporting' 2011-07-01 13:59:21 -07:00