6.1.14 hot-ids.bro

forbidden_ids : set[string]

If any of these usernames/login IDs are used, the corresponding connection is terminated.
Note: This variable is const, so may only be changed via redef.

forbidden_ids_if_no_password : set[string]

If any of these usernames/login IDs are used with no password, the corresponding connection is terminated.
Note: This variable is const, so may only be changed via redef.

forbidden_id_patterns : pattern

If a username/login ID matches this pattern, the corresponding connection is terminated.
Note: This variable is const, so may only be changed via redef.

always_hot_ids : set[string]

Connections that attempt to login with these IDs are always marked “hot”, whether or not they succeed. See also hot_ids.
Note: This variable is const, so may only be changed via redef.

hot_ids : set[string]

Similar to , except that only successful connections are marked “hot”.
Note: This variable is const, so may only be changed via redef.