zeek/policy.old/tcp.bro
2011-03-01 10:51:44 -05:00

6 lines
194 B
Text

# Generic TCP connection processing.
@load conn
redef capture_filters += { ["tcp"] = "tcp[13] & 7 != 0" };
# redef capture_filters += { ["tcp"] = "(tcp[13] & 7 != 0) or (ip6[53] & 7 != 0)" };