weird_log : file
Alerts related to weird
(unexpected or inconsistent)
traffic go in this file.
weird_action : table[string] of WeirdAction
A table of what to do (a WeirdAction
) when faced with a
particular “weird” scenario (the index). Example include logging to
the special “weird” file or ignoring the condition.
weird_action_filters : table[string] of function(c: connection): WeirdAction
If an entry exists in this table for a given weird situation, then the
corresponding entry is used to determine what action to
take; the default is to look in weird_action
.
weird_ignore_host : set[addr, string]
(host, weird condition) pairs in this set are ignored for the purposes of reporting.
Note: This variable isconst
, so may only be changed viaredef
.
weird_do_not_ignore_repeats : set[string]
The included alert conditions are reported even if they are repeated.
Note: This variable isconst
, so may only be changed viaredef
.