zeek/policy/frameworks
Seth Hall c5f683ee47 Notices actions are now accumulative.
- New log file for auditing the notice policy to
  see at a specific point in time what the fully
  ordered (by priority) notice policy was.
- New notice action "ACTION_STOP" to stop processing
  the notice policy.  This is essentially how the old
  IGNORE action can be done with the accumulative
  notices actions.  It just needs to be set as the
  $result at an at an appropriately high priority.
- No longer using the "match" statement as it didn't
  provide the flexibility to implement accumulative
  notice actions.  The functionality is now implemented
  completely in script-land.
- Beginning removal of action-filters script.
  Still need to come up with a way to implement
  some of the functionality of that script.
- Small documentation updates.
2011-06-24 13:35:48 -04:00
..
communication Small communication framework fixes. 2011-06-22 13:53:47 -04:00
dpd Some minor updates and comment tweaking. 2011-06-17 21:53:07 -04:00
intel Intelligence framwork updates. 2011-06-17 23:30:16 -04:00
logging Changing empty fields to also use "-" for ascii logging. 2011-06-07 23:05:35 -04:00
metrics Updates for the metrics framework. 2011-06-14 13:37:03 -04:00
notice Notices actions are now accumulative. 2011-06-24 13:35:48 -04:00
packet-filter Small cleanup to netstats script. 2011-06-16 11:15:19 -04:00
signatures Script cleanup. 2011-06-15 11:27:39 -04:00
software Script cleanup. 2011-06-15 11:27:39 -04:00