zeek/scripts/base/protocols/conn
Johanna Amann 9d489cde20 Add duration thresholding to the conn-size analyzer.
Now, in addition to setting thresholds for bytes and packet, one can set
a threshold for connection duration. Note that the threshold event is
only raised once the next packet in the connection is seen.

This also fixes a small pre-existing bug, in which a bunch of warnings
were raised if someone just used the lower-level functions without going
through the higher-level scripting API.
2019-08-01 11:57:40 -07:00
..
__load__.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
contents.zeek GH-234: rename Broxygen to Zeexygen along with roles/directives 2019-04-22 19:45:50 -07:00
inactivity.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
main.zeek More bro-to-zeek renaming in scripts and other files 2019-05-16 02:36:41 -05:00
polling.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00
thresholds.zeek Add duration thresholding to the conn-size analyzer. 2019-08-01 11:57:40 -07:00

Support for connection (TCP, UDP, or ICMP) analysis.