base/frameworks/netcontrol/shunt.zeek¶
- NetControl¶
Implementation of the shunt functionality for NetControl.
- Namespace
NetControl
- Imports
Summary¶
Types¶
Redefinitions¶
Events¶
Event that can be handled to access the |
Hooks¶
Functions¶
Stops forwarding a uni-directional flow’s packets to Zeek. |
Detailed Interface¶
Types¶
Events¶
- NetControl::log_netcontrol_shunt¶
- Type
event
(rec:NetControl::ShuntInfo
)
Event that can be handled to access the
NetControl::ShuntInfo
record as it is sent on to the logging framework.
Hooks¶
Functions¶
- NetControl::shunt_flow¶
-
Stops forwarding a uni-directional flow’s packets to Zeek.
- Parameters
f – The flow to shunt.
t – How long to leave the shunt in place, with 0 being indefinitely.
location – An optional string describing where the shunt was triggered.
- Returns
The id of the inserted rule on success and zero on failure.