mirror of
https://github.com/zeek/zeek.git
synced 2025-10-04 07:38:19 +00:00
e6ed61c47a
This switches the DPD logic to always log analyzers that raised a protocol confirmation. The logic is that, once a protocol has been confirmed - and thus there probably is log output - it does not make sense to later remove it from the log. It does make sense to somehow flag it as failed - but that seems like a secondary step. |
||
|---|---|---|
| .. | ||
| __load__.zeek | ||
| dpd.zeek | ||
| logging.zeek | ||
| main.zeek | ||
| README | ||
The analyzer framework allows to dynamically enable or disable Zeek's protocol analyzers, as well as to manage the well-known ports which automatically activate a particular analyzer for new connections.