115
edits
Incidents: Difference between revisions
Jump to navigation
Jump to search
→Available triggers
| Line 90: | Line 90: | ||
|Global: Connection start<br> | |Global: Connection start<br> | ||
(global_new_connection) | (global_new_connection) | ||
|This trigger is checked continuously at connection | |This trigger is checked continuously at the start of each new connection. It can be used to report new connections with a certain layer 4 protocol and a given port range, optionally only after a specific time after the system start. | ||
|l4_protocol, port_range, since_start_time | |l4_protocol, port_range, since_start_time | ||
|mandatory | |mandatory | ||