policy/frameworks/notice/actions/drop.zeek

Notice

This script extends the built in notice code to implement the IP address dropping functionality.

Namespace:: Notice
Imports:: base/frameworks/netcontrol, base/frameworks/notice/main.zeek, policy/frameworks/netcontrol/catch-and-release.zeek

Summary

Redefinitions

Notice::Info: record

New Fields:

dropped: bool &log &default = F &optional: Indicate if the $src IP address was dropped and denied network access.

Detailed Interface