zeek/testing/btest/Baseline/scripts.policy.frameworks.netcontrol.catch-and-release/netcontrol_catch_release.log
Jon Siwek b5050437fa GH-379: move catch-and-release and unified2 scripts to policy/
These are no longer loaded by default due to the performance impact they
cause simply by being loaded (they have event handlers for commonly
generated events) and they aren't generally useful enough to justify it.
2019-06-05 13:33:45 -07:00

22 lines
2 KiB
Text

#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path netcontrol_catch_release
#open 2016-05-26-23-20-44
#fields ts rule_id ip action block_interval watch_interval blocked_until watched_until num_blocked location message
#types time string addr enum interval interval time time count string string
1398529018.678276 2 192.168.18.50 NetControl::DROP 600.000000 3600.000000 1398529618.678276 1398532618.678276 1 - -
1398529018.678276 2 192.168.18.50 NetControl::INFO 600.000000 3600.000000 1398529618.678276 1398532618.678276 1 - Already blocked using catch-and-release - ignoring duplicate
1398529018.678276 2 192.168.18.50 NetControl::DROPPED 600.000000 3600.000000 1398529618.678276 1398532618.678276 1 - -
1398529018.678276 3 192.168.18.50 NetControl::SEEN_AGAIN 3600.000000 86400.000000 1398532618.678276 1398615418.678276 2 - -
1398529018.678276 3 192.168.18.50 NetControl::DROPPED 3600.000000 86400.000000 1398532618.678276 1398615418.678276 2 - -
1398529018.678276 4 192.168.18.50 NetControl::SEEN_AGAIN 86400.000000 604800.000000 1398615418.678276 1399133818.678276 3 - -
1398529018.678276 4 192.168.18.50 NetControl::DROPPED 86400.000000 604800.000000 1398615418.678276 1399133818.678276 3 - -
1398529018.678276 5 192.168.18.50 NetControl::SEEN_AGAIN 604800.000000 604800.000000 1399133818.678276 1399133818.678276 4 - -
1398529018.678276 5 192.168.18.50 NetControl::DROPPED 604800.000000 604800.000000 1399133818.678276 1399133818.678276 4 - -
1398529018.678276 6 192.168.18.50 NetControl::SEEN_AGAIN 604800.000000 604800.000000 1399133818.678276 1399133818.678276 5 - -
1398529018.678276 6 192.168.18.50 NetControl::DROPPED 604800.000000 604800.000000 1399133818.678276 1399133818.678276 5 - -
1398529018.678276 7 192.168.18.50 NetControl::SEEN_AGAIN 604800.000000 604800.000000 1399133818.678276 1399133818.678276 6 - -
1398529018.678276 7 192.168.18.50 NetControl::DROPPED 604800.000000 604800.000000 1399133818.678276 1399133818.678276 6 - -
#close 2016-05-26-23-20-44