zeek/scripts/policy
Christian Kreibich ac40d5c5b2 Remove periodic pinging of controller by agents
This changes the agent-controller communication to remove the need for ongoing
pinging of the controller by agents not actively "in service". Instead, agents
now use the notify_agent_hello event to the controller to report only their
identity. The controller puts them into service via an agent_welcome_request/
response pair, and takes them out of service via agent_standby_request/response.

This removes the on_change handler from the set of agents that is ready for
service, because not every change to this set is now a suitable time to
potentially send out the configuration. We now invoke this check explicitly in
the two situations where it's warranted: when a agent reports ready for service,
and when we've received a new configuration.
2021-12-21 16:44:04 -08:00
..
files Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
frameworks Remove periodic pinging of controller by agents 2021-12-21 16:44:04 -08:00
integration Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
misc Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
protocols Add analyzer_confirmation and analyzer_violation events 2021-11-23 19:36:50 -07:00
tuning Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00