mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 15:18:20 +00:00
28 lines
655 B
Text
28 lines
655 B
Text
# @TEST-EXEC: zeek -b %INPUT
|
|
# @TEST-EXEC: btest-diff sendmail.out
|
|
# @TEST-EXEC: btest-diff notice.log
|
|
|
|
@load base/frameworks/notice
|
|
@load base/utils/site
|
|
|
|
redef Notice::mail_dest = "user@example.net";
|
|
redef Notice::sendmail = "fake-sendmail";
|
|
|
|
redef Site::local_admins += {
|
|
[1.0.0.0/8] = set("cloudflare@example.net", "postmaster@the.cloud"),
|
|
[2.0.0.0/8] = set("2_dot@example.net"),
|
|
};
|
|
|
|
redef enum Notice::Type += {
|
|
Test_Notice,
|
|
};
|
|
|
|
event zeek_init()
|
|
{
|
|
NOTICE([$note=Test_Notice, $msg="test", $identifier="static", $src=1.1.1.1, $dst=2.2.2.2]);
|
|
}
|
|
|
|
hook Notice::policy(n: Notice::Info) &priority=1
|
|
{
|
|
add n$actions[Notice::ACTION_EMAIL_ADMIN];
|
|
}
|