Next: , Previous: broinit, Up: Predefined Variables



6.1.6 code-red.bro

code_red_log file
The file into which Code Red-related alerts are written.

code_red_list1 : table[addr] of count

A table which contains, for each IP address, how many Code Red I attacks were observed (based on a signature) by the machine at that address.

code_red_list2 : table[addr] of count

A table which contains, for each IP address, how many Code Red II attacks were observed (based on a signature) by the machine at that address.

local_code_red_response_pgm : string

By default, an empty string; if &redefed, the specified program will be invoked with the attack source IP as the argument the first time an attack from that IP is observed.

remote_code_red_response_pgm : string

By default, an empty string; if &redefed, the specified program will be invoked with the attack destination IP as the argument the first time an attack on that IP is observed.