mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
e6ed61c47a
This switches the DPD logic to always log analyzers that raised a protocol confirmation. The logic is that, once a protocol has been confirmed - and thus there probably is log output - it does not make sense to later remove it from the log. It does make sense to somehow flag it as failed - but that seems like a secondary step. |
||
|---|---|---|
| .. | ||
| conn.log | ||
| dpd.log | ||
| ftp.log | ||