zeek/scripts/policy/frameworks
Christian Kreibich ac40d5c5b2 Remove periodic pinging of controller by agents
This changes the agent-controller communication to remove the need for ongoing
pinging of the controller by agents not actively "in service". Instead, agents
now use the notify_agent_hello event to the controller to report only their
identity. The controller puts them into service via an agent_welcome_request/
response pair, and takes them out of service via agent_standby_request/response.

This removes the on_change handler from the set of agents that is ready for
service, because not every change to this set is now a suitable time to
potentially send out the configuration. We now invoke this check explicitly in
the two situations where it's warranted: when a agent reports ready for service,
and when we've received a new configuration.
2021-12-21 16:44:04 -08:00
..
cluster Remove periodic pinging of controller by agents 2021-12-21 16:44:04 -08:00
control Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
dpd Add analyzer_confirmation and analyzer_violation events 2021-11-23 19:36:50 -07:00
files Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
intel Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
netcontrol Support for log filter policy hooks 2020-09-30 12:32:45 -07:00
notice Add tests for e-mail actions, and cleanup the new logic a bit. 2021-04-26 23:01:34 -05:00
packet-filter More bro-to-zeek renaming in scripts and other files 2019-05-16 02:36:41 -05:00
signatures Hopefully the last major script reorganization. 2011-08-05 23:09:53 -04:00
software Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00