base/protocols/conn/inactivity.bro

Conn

Adjust the inactivity timeouts for interactive services which could very possibly have long delays between packets.

Namespace:Conn
Source File:/scripts/base/protocols/conn/inactivity.bro

Summary

Runtime Options

Conn::analyzer_inactivity_timeouts: table &redef Define inactivity timeouts by the service detected being used over the connection.
Conn::port_inactivity_timeouts: table &redef Define inactivity timeouts based on common protocol ports.

Detailed Interface

Runtime Options

Conn::analyzer_inactivity_timeouts
Type:table [Analyzer::Tag] of interval
Attributes:&redef
Default:
{
   [Analyzer::ANALYZER_FTP] = 1.0 hr,
   [Analyzer::ANALYZER_SSH] = 1.0 hr
}

Define inactivity timeouts by the service detected being used over the connection.

Conn::port_inactivity_timeouts
Type:table [port] of interval
Attributes:&redef
Default:
{
   [513/tcp] = 1.0 hr,
   [23/tcp] = 1.0 hr,
   [21/tcp] = 1.0 hr,
   [22/tcp] = 1.0 hr
}

Define inactivity timeouts based on common protocol ports.


Copyright 2016, The Bro Project. Last updated on January 10, 2019. Created using Sphinx 1.7.5.