mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
58613f0313
This field is used internally to trace which analyzers already had a violation. This is mostly used to prevent duplicate logging. In the past, c$service_violation was used for a similar purpose - however it has slightly different semantics. Where c$failed_analyzers tracks analyzers that were removed due to a violation, c$service_violation tracks violations - and doesn't care if an analyzer was actually removed due to it. |
||
|---|---|---|
| .. | ||
| __load__.zeek | ||
| dpd.zeek | ||
| logging.zeek | ||
| main.zeek | ||
| README | ||
The analyzer framework allows to dynamically enable or disable Zeek's protocol analyzers, as well as to manage the well-known ports which automatically activate a particular analyzer for new connections.