zeek/policy/tuning/defaults/remove-high-volume-notices.bro
Seth Hall b4b990cfb5 Updates to the DPD framework.
- Removed the ProtocolViolation notice.  I'd like to hear
  if someone actually used that notice for something.
- Folded the dyn-disable functionality into the dpd/base script.
- Other small cleanup.
2011-06-30 21:26:30 -04:00

15 lines
No EOL
436 B
Text

##! This strives to tune out high volume and less useful data
##! from the notice log.
@load notice
# Load the policy scripts where the notices are defined.
@load frameworks/notice/weird
# Remove these notices from logging since they can be too noisy.
redef Notice::ignored_types += {
Weird::ContentGap,
Weird::AckAboveHole,
Weird::RetransmissionInconsistency,
Weird::WeirdActivity, # Only allow these to go in the weird log.
};