base/frameworks/netcontrol/shunt.zeek¶
-
NetControl
¶
Implementation of the shunt functionality for NetControl.
- Namespace
NetControl
- Imports
Summary¶
Types¶
Redefinitions¶
Events¶
Event that can be handled to access the |
Functions¶
Stops forwarding a uni-directional flow’s packets to Zeek. |
Detailed Interface¶
Events¶
-
NetControl::log_netcontrol_shunt
¶ - Type
event
(rec:NetControl::ShuntInfo
)
Event that can be handled to access the
NetControl::ShuntInfo
record as it is sent on to the logging framework.
Functions¶
-
NetControl::shunt_flow
¶ -
Stops forwarding a uni-directional flow’s packets to Zeek.
- F
The flow to shunt.
- T
How long to leave the shunt in place, with 0 being indefinitely.
- Location
An optional string describing where the shunt was triggered.
- Returns
The id of the inserted rule on success and zero on failure.