Weird Namespace

Namespace: Weird.

class zlogging.enum.weird.Action(value, names=<not given>, *values, module=None, qualname=None, type=None, start=1, boundary=None)

Bases: IntFlag

Enum: Weird::Action.

Types of actions that may be taken when handling weird activity events.

See also

base/frameworks/notice/weird.zeek

ACTION_UNSPECIFIED = 1

A dummy action indicating the user does not care what internal decision is made regarding a given type of weird.

ACTION_IGNORE = 2

No action is to be taken.

ACTION_LOG = 4

Log the weird event every time it occurs.

ACTION_LOG_ONCE = 8

Log the weird event only once.

ACTION_LOG_PER_CONN = 16

Log the weird event once per connection.

ACTION_LOG_PER_ORIG = 32

Log the weird event once per originator host.

ACTION_NOTICE = 64

Always generate a notice associated with the weird event.

ACTION_NOTICE_ONCE = 128

Generate a notice associated with the weird event only once.

ACTION_NOTICE_PER_CONN = 256

Generate a notice for the weird event once per connection.

ACTION_NOTICE_PER_ORIG = 512

Generate a notice for the weird event once per originator host.

static _generate_next_value_(name, start, count, last_values)

Generate the next value when not given.

name: the name of the member start: the initial start value or None count: the number of existing members last_values: the last value assigned or None