zeek/scripts/policy/frameworks
Christian Kreibich a622e28eab Management framework: more resilient node shutdown upon deployment
When agents had to terminate existing Zeek cluster nodes at the beginning of a
new deployment, they so far used their internal state to look up the nodes and
fired off requests to the Supervisor to shut these down. This has a problem:
when an agent restarts unexpectedly, it has no internal state, and when it then
tries to create nodes that already exist, the Supervisor complains with error
messages.

To avoid this, the agent now tears down all Supervised nodes other than agents
and controllers. In order to do so, it first needs to query the Supervisor for
the current node status, which means there are now two such status requests: one
upon deployment, and one during get_nodes requests. In order to disambiguate
these contexts in the SupervisorControl::status_request/response transactions,
we use the finish() callback in the corresponding request state to continue
execution as needed.
2022-06-21 17:22:45 -07:00
..
control Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
dpd Add analyzer_confirmation and analyzer_violation events 2021-11-23 19:36:50 -07:00
files update uses of "when" in base scripts to include captures 2022-01-07 14:53:33 -08:00
intel Fix host header normalization in intel framework. 2021-12-21 21:54:47 +01:00
management Management framework: more resilient node shutdown upon deployment 2022-06-21 17:22:45 -07:00
netcontrol Support for log filter policy hooks 2020-09-30 12:32:45 -07:00
notice update uses of "when" in base scripts to include captures 2022-01-07 14:53:33 -08:00
packet-filter More bro-to-zeek renaming in scripts and other files 2019-05-16 02:36:41 -05:00
signatures Hopefully the last major script reorganization. 2011-08-05 23:09:53 -04:00
software update uses of "when" in base scripts to include captures 2022-01-07 14:53:33 -08:00