Weird Namespace

Namespace: Weird.

class zlogging.enum.Weird.Action(value)

Bases: IntFlag

Enum: Weird::Action.

Types of actions that may be taken when handling weird activity events.

See also

base/frameworks/notice/weird.zeek

ACTION_UNSPECIFIED = 1

A dummy action indicating the user does not care what internal decision is made regarding a given type of weird.

ACTION_IGNORE = 2

No action is to be taken.

ACTION_LOG = 4

Log the weird event every time it occurs.

ACTION_LOG_ONCE = 8

Log the weird event only once.

ACTION_LOG_PER_CONN = 16

Log the weird event once per connection.

ACTION_LOG_PER_ORIG = 32

Log the weird event once per originator host.

ACTION_NOTICE = 64

Always generate a notice associated with the weird event.

ACTION_NOTICE_ONCE = 128

Generate a notice associated with the weird event only once.

ACTION_NOTICE_PER_CONN = 256

Generate a notice for the weird event once per connection.

ACTION_NOTICE_PER_ORIG = 512

Generate a notice for the weird event once per originator host.