mirror of
https://github.com/zeek/zeek.git
synced 2025-10-10 10:38:20 +00:00
6611d28920
This is a fairly straightforward change. Previously, users had no control over whether this script was loaded. By relocating it to policy, users can now choose whether or not this is necessary functionality without modifying core Bro scripts. |
||
|---|---|---|
| .. | ||
| actions | ||
| __load__.bro | ||
| cluster.bro | ||
| main.bro | ||
| non-cluster.bro | ||
| README | ||
| weird.bro | ||
The notice framework enables Bro to "notice" things which are odd or potentially bad, leaving it to the local configuration to define which of them are actionable. This decoupling of detection and reporting allows Bro to be customized to the different needs that sites have.