zeek/testing/btest/Baseline/core.tunnels.false-teredo
Jon Siwek 5f3af9e9eb Add new Tunnel::delay_teredo_confirmation option, default to true.
This option indicates that the Teredo analyzer should wait until
it sees both sides of a connection using a valid Teredo encapsulation
before issuing a protocol_confirmation.  Previous behavior confirmed
on the first instance of a valid encapsulation, which could result
in more false positives (and e.g. bogus entries in known-services.log).

Addresses #890.
2012-10-02 15:13:38 -05:00
..
weird.log Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00