Johanna Amann 9d489cde20 Add duration thresholding to the conn-size analyzer. ... Now, in addition to setting thresholds for bytes and packet, one can set a threshold for connection duration. Note that the threshold event is only raised once the next packet in the connection is seen. This also fixes a small pre-existing bug, in which a bunch of warnings were raised if someone just used the lower-level functions without going through the higher-level scripting API.		2019-08-01 11:57:40 -07:00
..
files	GH-379: move catch-and-release and unified2 scripts to policy/	2019-06-05 13:33:45 -07:00
frameworks	Merge remote-tracking branch 'origin/topic/dev/non-ascii-logging'	2019-07-30 19:42:34 -07:00
misc	GH-488: teach the Version module to parse new version scheme	2019-07-25 23:05:06 -07:00
protocols	Add duration thresholding to the conn-size analyzer.	2019-08-01 11:57:40 -07:00
utils	Add proper JSON serialization via C++, deprecate json.zeek	2019-07-02 12:52:26 -07:00
init-bare.zeek	Add duration thresholding to the conn-size analyzer.	2019-08-01 11:57:40 -07:00
init-default.zeek	MQTT Analyzer heavily updated and ported from the analyzer originally by Supriya Kumar	2019-07-29 13:45:10 -04:00
init-frameworks-and-bifs.zeek	Rename all scripts to have ".zeek" file extension	2019-04-11 21:12:40 -05:00