worm_log : file
The file into which worm-detection-related alerts are written.
worm_list : table[addr] of count
A table of infected hosts, indexed by the infected hosts' addresses. The value is how many times the instance has been seen sending packets.
worm_type_list : table[addr, string] of count
A table of infected hosts, indexed by host address and type of worm. The value is how many times that particular worm has been seen on the host.