[Bro-Dev] [JIRA] (BIT-1377) Please merge topic/johanna/conn-threshold
Johanna Amann created BIT-1377: -- Summary: Please merge topic/johanna/conn-threshold Key: BIT-1377 URL: https://bro-tracker.atlassian.net/browse/BIT-1377 Project: Bro Issue Tracker Issue Type: Improvement Components: Bro Affects Versions: git/master Reporter: Johanna Amann Fix For: 2.4 Please merge topic/johanna/conn-threshold. This branch adds a high-level and a low-level API for connection thresholding (packets or bytes). The functions that are exposed to users are: {code} ConnThreshold::set_bytes_threshold(c, [bytes], [direction]); ConnThreshold::set_packets_threshold(c, [packets], [direction]); {code} as well as ConnThreshold::delete_bytes_threshold and ConnThreshold::delete_packets_threshold to delete thresholds. Several thresholds can be added for a single connection; all of them will be raised. The following two events trigger with the thresholds: {code} event ConnThreshold::bytes_threshold_crossed(c: connection, threshold: count, is_orig: bool) event ConnThreshold::packets_threshold_crossed(c: connection, threshold: count, is_orig: bool) {code} -- This message was sent by Atlassian JIRA (v6.4-OD-16-006#64014) ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
[Bro-Dev] [JIRA] (BIT-1377) Please merge topic/johanna/conn-threshold
[ https://bro-tracker.atlassian.net/browse/BIT-1377?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Johanna Amann updated BIT-1377: --- Status: Merge Request (was: Open) > Please merge topic/johanna/conn-threshold > - > > Key: BIT-1377 > URL: https://bro-tracker.atlassian.net/browse/BIT-1377 > Project: Bro Issue Tracker > Issue Type: Improvement > Components: Bro >Affects Versions: git/master >Reporter: Johanna Amann > Fix For: 2.4 > > > Please merge topic/johanna/conn-threshold. This branch adds a high-level and > a low-level API for connection thresholding (packets or bytes). > The functions that are exposed to users are: > {code} > ConnThreshold::set_bytes_threshold(c, [bytes], [direction]); > ConnThreshold::set_packets_threshold(c, [packets], [direction]); > {code} > as well as ConnThreshold::delete_bytes_threshold and > ConnThreshold::delete_packets_threshold to delete thresholds. Several > thresholds can be added for a single connection; all of them will be raised. > The following two events trigger with the thresholds: > {code} > event ConnThreshold::bytes_threshold_crossed(c: connection, threshold: count, > is_orig: bool) > event ConnThreshold::packets_threshold_crossed(c: connection, threshold: > count, is_orig: bool) > {code} -- This message was sent by Atlassian JIRA (v6.4-OD-16-006#64014) ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
[Bro-Dev] [JIRA] (BIT-1377) Please merge topic/johanna/conn-threshold
[ https://bro-tracker.atlassian.net/browse/BIT-1377?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-1377: - Assignee: Robin Sommer > Please merge topic/johanna/conn-threshold > - > > Key: BIT-1377 > URL: https://bro-tracker.atlassian.net/browse/BIT-1377 > Project: Bro Issue Tracker > Issue Type: Improvement > Components: Bro >Affects Versions: git/master >Reporter: Johanna Amann >Assignee: Robin Sommer > Fix For: 2.4 > > > Please merge topic/johanna/conn-threshold. This branch adds a high-level and > a low-level API for connection thresholding (packets or bytes). > The functions that are exposed to users are: > {code} > ConnThreshold::set_bytes_threshold(c, [bytes], [direction]); > ConnThreshold::set_packets_threshold(c, [packets], [direction]); > {code} > as well as ConnThreshold::delete_bytes_threshold and > ConnThreshold::delete_packets_threshold to delete thresholds. Several > thresholds can be added for a single connection; all of them will be raised. > The following two events trigger with the thresholds: > {code} > event ConnThreshold::bytes_threshold_crossed(c: connection, threshold: count, > is_orig: bool) > event ConnThreshold::packets_threshold_crossed(c: connection, threshold: > count, is_orig: bool) > {code} -- This message was sent by Atlassian JIRA (v6.4-OD-16-006#64014) ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
[Bro-Dev] [JIRA] (BIT-1377) Please merge topic/johanna/conn-threshold
[ https://bro-tracker.atlassian.net/browse/BIT-1377?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1377: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) > Please merge topic/johanna/conn-threshold > - > > Key: BIT-1377 > URL: https://bro-tracker.atlassian.net/browse/BIT-1377 > Project: Bro Issue Tracker > Issue Type: Improvement > Components: Bro >Affects Versions: git/master >Reporter: Johanna Amann >Assignee: Robin Sommer > Fix For: 2.4 > > > Please merge topic/johanna/conn-threshold. This branch adds a high-level and > a low-level API for connection thresholding (packets or bytes). > The functions that are exposed to users are: > {code} > ConnThreshold::set_bytes_threshold(c, [bytes], [direction]); > ConnThreshold::set_packets_threshold(c, [packets], [direction]); > {code} > as well as ConnThreshold::delete_bytes_threshold and > ConnThreshold::delete_packets_threshold to delete thresholds. Several > thresholds can be added for a single connection; all of them will be raised. > The following two events trigger with the thresholds: > {code} > event ConnThreshold::bytes_threshold_crossed(c: connection, threshold: count, > is_orig: bool) > event ConnThreshold::packets_threshold_crossed(c: connection, threshold: > count, is_orig: bool) > {code} -- This message was sent by Atlassian JIRA (v6.4-OD-16-006#64014) ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev