policy/frameworks/notice/actions/drop.zeek

Notice

This script extends the built in notice code to implement the IP address dropping functionality.

Namespace:Notice
Imports:base/frameworks/netcontrol, base/frameworks/notice/main.zeek, policy/frameworks/netcontrol/catch-and-release.zeek

Summary

Redefinitions

Notice::Info: record
New Fields:

Notice::Info

dropped: bool &log &default = F &optional

Indicate if the $src IP address was dropped and denied network access.

Detailed Interface