policy/frameworks/notice/actions/drop.zeek

Notice

This script extends the built in notice code to implement the IP address dropping functionality.

Namespace

Notice

Imports

base/frameworks/netcontrol, base/frameworks/notice/main.zeek, policy/frameworks/netcontrol/catch-and-release.zeek

Summary

Redefinitions

Notice::Info: record

New Fields Notice::Info dropped: bool &log &default = F &optional Indicate if the $src IP address was dropped and denied network access.

Detailed Interface