zeek/scripts/policy
Seth Hall 9e2ddac572 Fixes for known-services.
- I was wildly misunderstanding the semantics of the
  connection_state_remove event.  That's fixed now in
  my brain and in the script.

- If a service isn't detected, logging is delayed by
  2 minutes to try and allow for another connection
  to happen that actually does the protocol correctly
  and detectably.
2011-09-28 12:51:44 -04:00
..
frameworks Merge remote-tracking branch 'origin/topic/jsiwek/reorg-followup' 2011-08-25 16:44:31 -04:00
integration/barnyard2 Logging framework update and mass Log::ID renaming. 2011-09-03 01:10:17 -04:00
misc Small changes for the capture-loss script make the output more understandable. 2011-09-28 11:19:15 -04:00
protocols Fixes for known-services. 2011-09-28 12:51:44 -04:00
tuning Logging framework update and mass Log::ID renaming. 2011-09-03 01:10:17 -04:00