zeek/scripts/policy/protocols
Seth Hall bec965b66f Large update for the SumStats framework.
- On-demand access to sumstats results through "return from"
   functions named SumStats::request and Sumstats::request_key.
   Both functions are tested in standalone and clustered modes.

 - $name field has returned to SumStats which simplifies cluster
   code and makes the on-demand access stuff possible.

 - Clustered results can only be collected for 1 minute from their
   time of creation now instead of time of last read.

 - Thresholds use doubles instead of counts everywhere now.

 - Calculation dependency resolution occurs at start up time now
   instead of doing it at observation time which provide a minor
   cpu performance improvement.  A new plugin registration mechanism
   was created to support this change.

 - AppStats now has a minimal doc string and is broken into hook-based
   plugins.

 - AppStats and traceroute detection added to local.bro
2013-05-21 15:52:59 -04:00
..
conn SumStats test checkpoint. 2013-04-16 00:54:41 -04:00
dns Small script refinements and documentation updates. 2011-10-21 13:58:58 -04:00
ftp Large update for the SumStats framework. 2013-05-21 15:52:59 -04:00
http Large update for the SumStats framework. 2013-05-21 15:52:59 -04:00
modbus Fix some warnings from sphinx when building docs. 2012-11-15 16:40:18 -06:00
smtp SumStats test checkpoint. 2013-04-16 00:54:41 -04:00
ssh Large update for the SumStats framework. 2013-05-21 15:52:59 -04:00
ssl Merge remote-tracking branch 'origin/topic/bernhard/base64' 2013-03-17 13:00:52 -07:00