Next: , Previous: udpbro, Up: Predefined Variables



6.1.36 weird.bro

weird_log : file
Alerts related to weird (unexpected or inconsistent) traffic go in this file.

weird_action : table[string] of WeirdAction

A table of what to do (a WeirdAction ) when faced with a particular “weird” scenario (the index). Example include logging to the special “weird” file or ignoring the condition.

weird_action_filters : table[string] of function(c: connection): WeirdAction

If an entry exists in this table for a given weird situation, then the corresponding entry is used to determine what action to take; the default is to look in weird_action.

weird_ignore_host : set[addr, string]

(host, weird condition) pairs in this set are ignored for the purposes of reporting.
Note: This variable is const, so may only be changed via redef.

weird_do_not_ignore_repeats : set[string]

The included alert conditions are reported even if they are repeated.
Note: This variable is const, so may only be changed via redef.